eDiscovery Searches including extra documents

%3CLINGO-SUB%20id%3D%22lingo-sub-1986514%22%20slang%3D%22en-US%22%3EeDiscovery%20Searches%20including%20extra%20documents%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1986514%22%20slang%3D%22en-US%22%3E%3CP%3E%3CSPAN%20class%3D%22overflowWrapBreakWord-1128%22%3ERunning%20searches%20in%20Advanced%20eDiscovery%2C%20if%20the%20location%20includes%20both%20a%20SharePoint%2FOne%20Drive%20site%2C%20and%20Exchange%2C%20for%20example%20if%20I've%20created%20a%20Custodian%20and%20identified%20their%20EXO%2FODB%20site%2C%20and%20added%20an%20additional%20Team%20or%20two%2C%20and%20then%20try%20to%20simply%20point%20to%20the%20Custodian%20in%20Search%20and%20search%20for%2C%20say%20%22kind%3Amicrosoftteams%22%2C%20I%20would%20expect%20it%20to%20return%20all%20of%20the%20Teams-related%20messages%20in%20the%20mailboxes%2C%20but%20have%20zero%20hits%20from%20ODB%2FSharePoint.%20In%20fact%2C%20it%20hits%20on%20EVERY%20document%20in%20SPO%2FODB%20and%20adds%20them%20all%20to%20my%20search%20results.%20I%20see%20the%20same%20thing%20in%20Core%20if%20I%20include%20a%20SPO%20site%20in%20that%20search%2C%20and%20I%20also%20see%20the%20same%20thing%20in%20reverse.%20Searching%20a%20Custodian%20for%20a%20metadata%20field%20specific%20to%20SPO%2C%20like%20%22filename%3Aemployee%22%20returns%20every%20item%20from%20the%20mailbox.%20Seems%20like%20a%20bug%2C%20can%20anyone%20confirm%20that%20it%20is%2C%20and%20if%20we%20should%20expect%20a%20fix%20for%20it%3F%20%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1986514%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EeDiscovery%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1986980%22%20slang%3D%22en-US%22%3ERe%3A%20eDiscovery%20Searches%20including%20extra%20documents%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1986980%22%20slang%3D%22en-US%22%3E%3CP%3EI%20don't%20see%20%22kind%3Amicrosoftteams%22%20in%20the%20docs.%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fexchange%2Fpolicy-and-compliance%2Fediscovery%2Fmessage-properties-and-search-operators%3Fview%3Dexchserver-2019%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EMessage%20properties%20and%20search%20operators%20for%20In-Place%20eDiscovery%20in%20Exchange%20Server%20%7C%20Microsoft%20Docs%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E
New Contributor

Running searches in Advanced eDiscovery, if the location includes both a SharePoint/One Drive site, and Exchange, for example if I've created a Custodian and identified their EXO/ODB site, and added an additional Team or two, and then try to simply point to the Custodian in Search and search for, say "kind:microsoftteams", I would expect it to return all of the Teams-related messages in the mailboxes, but have zero hits from ODB/SharePoint. In fact, it hits on EVERY document in SPO/ODB and adds them all to my search results. I see the same thing in Core if I include a SPO site in that search, and I also see the same thing in reverse. Searching a Custodian for a metadata field specific to SPO, like "filename:employee" returns every item from the mailbox. Seems like a bug, can anyone confirm that it is, and if we should expect a fix for it?

2 Replies