---
title: "Save-VBREntraIDLogsBackupFLRItem"
description: "Restores files and folders backed up by a log backup job that protects Microsoft Entra ID audit and sign-in logs. Product Edition: Enterprise Plus, Veeam Universal License This cmdlet restores and saves files and folders backed up by a log backup job"
canonical: "https://helpcenter.veeam.com/docs/vbr/powershell/save-vbrentraidlogsbackupflritem.html"
breadcrumb: "Veeam PowerShell Reference > Veeam PowerShell Reference > Microsoft EntraID Support > Log Data Recovery > Save-VBREntraIDLogsBackupFLRItem"
dateModified: "2026-08-20"
---

# Save-VBREntraIDLogsBackupFLRItem

## Short Description
Restores files and folders backed up by a log backup job that protects Microsoft Entra ID audit and sign-in logs.

**Product Edition**: Enterprise Plus, Veeam Universal License

## Syntax
```
Save-VBREntraIDLogsBackupFLRItem -Item <VBRUnstructuredBackupFLRItem[]> -Server <VBRUnstructuredServer>
 -Path <String> [-RunAsync] [-RetrievalSettings <VBRUnstructuredBackupColdStorageRetrievalSettings>] [-Force] [<CommonParameters>]
```

## Detailed Description
This cmdlet restores and saves files and folders backed up by a log backup job.

## Parameters

<table style="width:100%;" class="Blue_Table">
      <tr style="vertical-align:top">
        <th style="width:20%;">
          <p>Parameter</p>
        </th>
        <th style="width:20%;">
          <p>Description</p>
        </th>
        <th style="width:20%;">
          <p>Type</p>
        </th>
        <th style="width:10%;">
          <p>Required</p>
        </th>
        <th style="width:10%;">
          <p>Position</p>
        </th>
        <th style="width:10%;">
          <p>Accept Pipeline Input</p>
        </th>
      </tr>
      <tr style="vertical-align:top">
        <td>
          <p class="Table_Text_Bold"><span class="Table_Text_Bold">Force</span></p>
        </td>
        <td>
          <p>Defines that the cmdlet will modify settings of managed file shares without showing warnings in the PowerShell console.</p>
        </td>
        <td style="width:10%;">
          <p><code>SwitchParameter</code></p>
        </td>
        <td style="width:10%;">
          <p>False</p>
        </td>
        <td style="width:10%;">
          <p>Named</p>
        </td>
        <td style="width:10%;">
          <p>False</p>
        </td>
      </tr>
      <tr style="vertical-align:top">
        <td>
          <p class="Table_Text_Bold"><span class="Table_Text_Bold">Item</span></p>
        </td>
        <td>
          <p>Specifies an array of Entra ID log files and folders that you want to restore.</p><p>Accepts the <code>VBREntraIDLogsBackupFLRItem[]</code> object. To get this object, run the <a href="get-vbrentraidlogsbackupflritem.md"><code>Get-VBREntraIDLogsBackupFLRItem</code></a> cmdlet.</p>
        </td>
        <td style="width:10%;">
          <p><code>VBRUnstructuredBackupFLRItem[]</code></p>
        </td>
        <td style="width:10%;">
          <p>True</p>
        </td>
        <td style="width:10%;">
          <p>Named</p>
        </td>
        <td style="width:10%;">
          <p>True (ByPropertyName, ByValue)</p>
        </td>
      </tr>
      <tr style="vertical-align:top">
        <td>
          <p class="Table_Text_Bold"><span class="Table_Text_Bold">Path</span></p>
        </td>
        <td>
          <p>Specifies the path to the folder where you want to restore log files or folders.</p>
        </td>
        <td style="width:10%;">
          <p><code>String</code></p>
        </td>
        <td style="width:10%;">
          <p>True</p>
        </td>
        <td style="width:10%;">
          <p>Named</p>
        </td>
        <td style="width:10%;">
          <p>False</p>
        </td>
      </tr>
      <tr style="vertical-align:top">
        <td>
          <p class="Table_Text_Bold"><span class="Table_Text_Bold">RetrievalSettings</span></p>
        </td>
        <td>
          <p>Specifies the retrieval policy settings. The cmdlet will use these settings to retrieve data from archive repositories.</p><p>Accepts the <code>VBRUnstructuredBackupColdStorageRetrievalSettings</code> object. To create this object, run the <a href="new-vbrunstructuredbackupretrievalsettings.md"><code>New-VBRUnstructuredBackupColdStorageRetrievalSettings</code></a> cmdlet.</p>
        </td>
        <td style="width:10%;">
          <p><code>VBRUnstructuredBackupColdStorageRetrievalSettings</code></p>
        </td>
        <td style="width:10%;">
          <p>False</p>
        </td>
        <td style="width:10%;">
          <p>Named</p>
        </td>
        <td style="width:10%;">
          <p>False</p>
        </td>
      </tr>
      <tr style="vertical-align:top">
        <td>
          <p class="Table_Text_Bold"><span class="Table_Text_Bold">RunAsync</span></p>
        </td>
        <td>
          <p>Defines that the command returns immediately without waiting for the task to complete.</p>
        </td>
        <td style="width:10%;">
          <p><code>SwitchParameter</code></p>
        </td>
        <td style="width:10%;">
          <p>False</p>
        </td>
        <td style="width:10%;">
          <p>Named</p>
        </td>
        <td style="width:10%;">
          <p>False</p>
        </td>
      </tr>
      <tr style="vertical-align:top">
        <td>
          <p class="Table_Text_Bold"><span class="Table_Text_Bold">Server</span></p>
        </td>
        <td>
          <p>Specifies the file share to which you want to restore log files or folders.</p><p>Accepts the <code>VBRUnstructuredServer</code> object. To get this object, run the <a href="get-vbrunstructuredserver.md"><code>Get-VBRUnstructuredServer</code></a> cmdlet.</p>
        </td>
        <td style="width:10%;">
          <p><code>VBRUnstructuredServer</code></p>
        </td>
        <td style="width:10%;">
          <p>True</p>
        </td>
        <td style="width:10%;">
          <p>Named</p>
        </td>
        <td style="width:10%;">
          <p>False</p>
        </td>
      </tr>
    </table>

`<CommonParameters>`

This cmdlet supports Microsoft PowerShell common parameters. For more information on common parameters, see [ Microsoft Docs](https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_commonparameters?view=powershell-7).

## Output Object
The cmdlet returns the array of `VBRUnstructuredBackupFLRItem` objects that contain settings of restored log files and folders.

## Examples

::: example
### Restoring Log Files

This example shows how to restore the log files whose names start with `2024-11-01T10`. The files are restored to the `\\WinSrv\Reports` file share to the `\\WinSrv\Reports\Restored` folder.

```
$tenant = Get-VBREntraIdTenant -AzureTenantId "xxxxx"
$logBackups = Get-VBREntraIDLogsBackup
$logRestoreSession = Start-VBREntraIDLogsBackupFLRSession -Backup $logBackups[0] -Tenant $tenant
$fileshare = Get-VBRUnstructuredServer -Name "\\WinSrv\Reports"
$files = Get-VBREntraIDLogsBackupFLRItem -Session $logRestoreSession -Name "2024-11-01T10*" -Recurse
Save-VBREntraIDLogsBackupFLRItem -Server $fileshare -Item $files -Path "\\WinSrv\Reports\Restored"
```

Perform the following steps:

1. Run the [`Get-VBREntraIdTenant`](get-vbrentraidtenant.md) cmdlet. Specify the `AzureTenantId` parameter value. Save the result to the `$tenant` variable.
2. Run the [`Get-VBREntraIDLogsBackup`](get-vbrentraidlogsbackup.md) cmdlet.

   The `Get-VBREntraIDLogsBackup` cmdlet will return an array of backups. Mind the ordinal number of the necessary backup, for arrays it starts with 0. In our example, it is the first backup in the array.

3. Run the [`Start-VBREntraIDLogsBackupFLRSession`](start-vbrentraidlogsbackupflrsession.md) cmdlet. Set the `$logBackups[0]` variable as the `Backup` parameter value. Set the `$tenant` variable as the `Tenant` parameter value. Save the result to the `$logRestoreSession` variable.
4. Run the [`Get-VBRUnstructuredServer`](get-vbrunstructuredserver.md) cmdlet. Specify the `Name` parameter value. Save the result to the `$fileshare` variable.
5. Run the [`Get-VBREntraIDLogsBackupFLRItem`](get-vbrentraidlogsbackupflritem.md) cmdlet. Specify the following settings:

   - Set the `$logRestoreSession` variable as the `Session` parameter value.
   - Specify the `Name` parameter value.
   - Provide the `Recurse` parameter value.
   - Save the result to the `$files` variable.

6. Run the `Save-VBREntraIDLogsBackupFLRItem` cmdlet. Specify the following settings:

   - Set the `$files` variable as the `Item` parameter value.
   - Set the `$fileshare` variable as the `Server` parameter value.
   - Specify the `Path` parameter value.

:::

## Related Commands

- [`Get-VBREntraIdTenant`](get-vbrentraidtenant.md)
- [`Get-VBREntraIDLogsBackup`](get-vbrentraidlogsbackup.md)
- [`Start-VBREntraIDLogsBackupFLRSession`](start-vbrentraidlogsbackupflrsession.md)
- [`Get-VBREntraIDLogsBackupFLRItem`](get-vbrentraidlogsbackupflritem.md)