From the course: Complete Guide to Microsoft Purview

Search for data and export results

- [Instructor] I'm happy to say that, after some time has passed, we can see my compliance issues case has netted some results. In this case, we see 124 hits with 52 megabytes in one location, so it must have been the email. And you can see the top data source was my account that has 124 items. Now we can go ahead and export that information if we'd like. Here you can type a name for the export. You'll definitely need to add one in because it has the little asterisk at the top. I'll call it Compliance Export. You can add in a description. You can see the various different types of information. I'm going to have all the information I can possibly have in here. If I have any attachments, I want to see those. And I want to see export items with items report. It's also going to give you the option for the type of export. Now, PSTs are definitely going away with the newest version of Outlook. So if you want, you can choose the MSG files or EML files instead. So I'll go ahead and choose Export. Now, sometimes these exports take a long time as well, so I'm not 100% sure we'll be able to see this export, but I wanted to show you how to perform this export. Here you can see the export has started. If I click on Process Manager at the top, we can see the status. Process Manager just tells us information about things we might have exported in the past. And here you can see the statistics that I had previously done had completed. And I can download the report again if I'd like. There's my export in progress from my compliance report. So I'm going to close this, and I want to show you a different section of eDiscovery called Content Search, also in preview. And here you can see that, we can create a search, but it's not necessarily a case. When we create a case, it has a lot of legal implications, it has a lot of additional information that can be used in some sort of a legal case. But searching content, which basically does the same thing, is not a case. It's just if you want to search for content. That's basically it. Now, if you see content in here, then I suggest you create a case so that way you have all the legal implications taken care of. So this is sort of a mini-way of just doing a search without going through all the procedure of creating an actual case. So I've already created this case searching for keywords as you see here. And it's showing all the different data sources, all the different mailboxes, and some of the sources for OneDrive and SharePoint. You can see the merger is going to be the keyword that I used. I'm going to go back to Content Search and just create a new one. And I'll just give it a name of Search1. And you can see we have the same options that you had in the cases. You can add the data sources, you can add people and groups, public folders from email if you'd like. Since I'm not really going to wait around for the results, I'm just going to choose one particular user. And you can see it's June's email. And then I can go ahead and choose to select a filter. Once again, I can choose a keyword and I can add whatever value I'd like. I'll say this one is pay raise. If we're going to talk about pay raise, I want to know about it. And then you can run that query. I'm going to go back to Process Manager, and here you can see that my generate statistics from that query are in progress. So it's just showing me the Process Manager from my content search. When I go to Cases, it's going to show me process management from my cases. And since the Process Manager is no longer here, it means everything's been processed. So now I can go down into my Downloads section, and there's my report. And you can see they're all exported into Excel where I can go ahead and review who might have violated those particular keywords as far as compliance goes. Searching for data and exporting the results can be very useful for cases as well as simple content searches.

Contents