SOLVED

e-discovery search based on meeting appointment start time?

%3CLINGO-SUB%20id%3D%22lingo-sub-1691560%22%20slang%3D%22en-US%22%3Ee-discovery%20search%20based%20on%20meeting%20appointment%20start%20time%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1691560%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20all%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20am%20currently%20working%20on%20an%20ediscovery%20case%2C%20which%20requires%20me%20to%20search%20a%20particular%20user%20mailbox%20for%20calendar%20entries.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWhat%20I%20would%20like%20to%20achieve%20is%20an%20export%20of%20the%20mailbox%20calendar%20appointments%20(kind%3Ameeting)%20based%20on%20the%20actual%20date%20of%20the%20appointment%20(i.e.%20the%20Start%20Time)%2C%20rather%20than%20the%20date%20on%20which%20the%20appointment%20was%20send%2Freceived%2C%20however%20going%20from%20docs%20articles%2C%20it%20does%20not%20look%20like%20this%20is%20possible%20(%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoft-365%2Fcompliance%2Fkeyword-queries-and-search-conditions%3Fview%3Do365-worldwide)%2C%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoft-365%2Fcompliance%2Fkeyword-queries-and-search-conditions%3Fview%3Do365-worldwide)%2C%3C%2FA%3E%26nbsp%3Bwhich%20seems%20like%20a%20rather%20irritating%20limitation%20of%20the%20O365%20SCC.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIs%20anyone%20aware%20of%20how%20I%20could%20achieve%20my%20goal%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1691560%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAdmin%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ECompliance%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EeDiscovery%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Highlighted
Occasional Contributor

Hi all,

 

I am currently working on an ediscovery case, which requires me to search a particular user mailbox for calendar entries.

 

What I would like to achieve is an export of the mailbox calendar appointments (kind:meeting) based on the actual date of the appointment (i.e. the Start Time), rather than the date on which the appointment was send/received, however going from docs articles, it does not look like this is possible (https://docs.microsoft.com/en-us/microsoft-365/compliance/keyword-queries-and-search-conditions?view... which seems like a rather irritating limitation of the O365 SCC.

 

Is anyone aware of how I could achieve my goal?

2 Replies
Highlighted
Best Response confirmed by dunnep26 (Occasional Contributor)
Solution

I dont think it's possible with the KQL syntax, sorry. What you can do is get all the meeting items, than use some script/code to fetch the relevant MAPI properties out of each item and filter by it.

Highlighted

Thanks @Vasil Michev , I appreciate you taking the time to reply. I will look into doing this another way.