Forum Discussion
Question about eDiscovery syntax
What would the appropriate eDiscovery syntax be if I wanted to perform a search on a single Exchange mailbox, capturing all email interactions between the mailbox's owner (i.e. mailto:email address removed for privacy reasons) and an external email address (i.e. mailto:email address removed for privacy reasons)?
2 Replies
- ninachen
Microsoft
OneTechBeyond this is an example of how you would do it:
If "Tijana" is the employee (internal user) you can search against her mailbox with the query to include the participants with the external address (gmail example). Add a date filter if needed.
This is very easy. You select the mailbox under Exchange Mailboxes. Then in Define Search Conditions: Add Condition, Participants. Add the external as a participant. Either full email, or example.com, and ENTER. Enter, and do 2nd one, and Enter again to force it to accept that address.
This will show all emails from or to the external. Select Received date, etc as needed.
