Forum Discussion
TomWechsler
Aug 29, 2021MVP
Using the eDiscovery tool for content search in the Microsoft 365 Compliance Center!
Dear Microsoft 365 Friends,
This article is about the eDiscovery (content search) tool in Microsoft 365. Before we start, a quick word about licenses. In order to work with the tool, you ne...
dkafrissenrvk
May 20, 2022Copper Contributor
Hi Tom
Frustratingly there is little documentation I can find for doing Boolean searches in eDiscovery.
According to documentation they list AND, OR, NOT and NEAR
The first three are straight forward, but the Near one I assume is like what I learned (thirty years ago, geesh) would be w/3 to say one work within three, but near isn't explicit for how much to search.
And then there are the research, to, participants fields. I want to exclude any email that is sent to my own domain, so I only want outgoing mail from my company where no one else is copied. I've been using NOT recipient:<domain>
And then there is a question of using parenthesis, are these allowed.
I have created some fake emails between myself and myself one inside domain and one out (actually two but doesn't matter) and I do a search for (term or term),NOT recipeint:<domain> and a date range of a few days.
This returns no information at all and it really should as I created a few back and forth.
So that's where I am, if you know any good references I can look up I'd appreciate the share.
Thansk
David
Frustratingly there is little documentation I can find for doing Boolean searches in eDiscovery.
According to documentation they list AND, OR, NOT and NEAR
The first three are straight forward, but the Near one I assume is like what I learned (thirty years ago, geesh) would be w/3 to say one work within three, but near isn't explicit for how much to search.
And then there are the research, to, participants fields. I want to exclude any email that is sent to my own domain, so I only want outgoing mail from my company where no one else is copied. I've been using NOT recipient:<domain>
And then there is a question of using parenthesis, are these allowed.
I have created some fake emails between myself and myself one inside domain and one out (actually two but doesn't matter) and I do a search for (term or term),NOT recipeint:<domain> and a date range of a few days.
This returns no information at all and it really should as I created a few back and forth.
So that's where I am, if you know any good references I can look up I'd appreciate the share.
Thansk
David
Trine_Morsing
Mar 22, 2023Copper Contributor
How do a customer turn it off ? The customer have turn it off in the 0365 admin portal, but we make at scripts it seems that it is still on