Forum Discussion
Solved
Content Search & Unindexed Items
Recently, Unindexed Items have started to appear in our content searches. I believe these are most likely encryted documents? Please correct if I am mistaken. I would like to ensure that the Search &...
I FINALLY got an answer from MS Support. The purge function will never delete an unindexed item. They also have removed the ability to exlude unindexed items from search due to legal reasons. You can exclude unindexed on export, but not on search anymore like you used to be able to.
The following resouces detail the changes.
- Unindexed items : https://support.office.com/en-us/article/Unindexed-items-in-Content-Search-in-Office-365-d1691de4-ca0d-446f-a0d0-373a4fc8487b
- Creating a content search : https://support.office.com/en-us/article/Run-a-Content-Search-in-the-Office-365-Security-Compliance-Center-61852fd9-fe8a-4880-a339-cb19ed3bff4a?ui=en-US&rs=en-US&ad=US#create
- Search & Purge : https://support.office.com/en-us/article/Search-for-and-delete-email-messages-in-your-Office-365-organization-Admin-Help-3526fd06-b45f-445b-aed4-5ebd37b3762a#moreinfo
When you run an Action against Content Search, you have the option to specify whether unindexed items are included in the scope. If you are doing this via PowerShell, the "-Scope IndexedItemsOnly" parameter is what you need. More info here: https://technet.microsoft.com/EN-US/library/a3a2897c-07a8-41d6-99cd-f2440613fbce(EXCHG.160).aspx
Plus, you can always run the Export action first, so you have a backup copy if something goes wrong.
Unfortunately the "Scope" is only available on Export commands. I am trying to run a purge command and it wont accept the -Scope IndexedItemsOnly as part of the command.
Ill redo the search using Powershell and choose not to include the unindexed items. I dont understand why this was removed from the GUI. I remember it being there before.
Wow... I just tried to run this via powershell and the -IncludeUnindexedItems switch is not avialable there either.
PS C:\Scripts> New-ComplianceSearch -Name "deltaphishing2" -ExchangeLocation All -IncludeUnindexedItemsEnabled False -WhatIf
A parameter cannot be found that matches parameter name 'IncludeUnindexedItemsEnabled'.
+ CategoryInfo : InvalidArgument: (:) [New-ComplianceSearch], ParameterBindingException
+ FullyQualifiedErrorId : NamedParameterNotFound,New-ComplianceSearch
+ PSComputerName : ps.compliance.protection.outlook.comCan someone else see if they still have the ability?
The parameter is available for the "action" cmdlets, not the generic "search" ones. But you are right, it does not seem to be available for the Purge action. Here's an example for Export:
New-CComplianceSearchAction -SearchName blabla -Export -Scope UnindexedItemsOnly
I FINALLY got an answer from MS Support. The purge function will never delete an unindexed item. They also have removed the ability to exlude unindexed items from search due to legal reasons. You can exclude unindexed on export, but not on search anymore like you used to be able to.
The following resouces detail the changes.
- Unindexed items : https://support.office.com/en-us/article/Unindexed-items-in-Content-Search-in-Office-365-d1691de4-ca0d-446f-a0d0-373a4fc8487b
- Creating a content search : https://support.office.com/en-us/article/Run-a-Content-Search-in-the-Office-365-Security-Compliance-Center-61852fd9-fe8a-4880-a339-cb19ed3bff4a?ui=en-US&rs=en-US&ad=US#create
- Search & Purge : https://support.office.com/en-us/article/Search-for-and-delete-email-messages-in-your-Office-365-organization-Admin-Help-3526fd06-b45f-445b-aed4-5ebd37b3762a#moreinfo