Converting an exist Content Search to an ediscovery search in the new Security and Compliance Module

%3CLINGO-SUB%20id%3D%22lingo-sub-54698%22%20slang%3D%22en-US%22%3EConverting%20an%20exist%20Content%20Search%20to%20an%20ediscovery%20search%20in%20the%20new%20Security%20and%20Compliance%20Module%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-54698%22%20slang%3D%22en-US%22%3E%3CP%3EAny%20idea%20if%20there%20is%20a%20way%20on%20how%20to%20convert%2Finclude%20an%20%3CSTRONG%3Eexisting%20Content%20search%3C%2FSTRONG%3E%20in%20the%20Ediscovery%20Case%20Search.%3C%2FP%3E%3CP%3EThere%20was%20some%20guidance%20on%20how%20to%20convert%20the%20existing%20content%20search%20to%20an%20Ediscovery%20workflow%20in%20EXO%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fsupport.office.com%2Fen-us%2Farticle%2FUse-Content-Search-in-your-eDiscovery-workflow-55f31488-288a-473a-9b9e-831a11e3711a%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fsupport.office.com%2Fen-us%2Farticle%2FUse-Content-Search-in-your-eDiscovery-workflow-55f31488-288a-473a-9b9e-831a11e3711a%3C%2FA%3E%3C%2FP%3E%3CP%3EHowever%20since%20MS%20is%20moving%20to%20the%20new%20Security%20and%20Compliance%20Module%20is%20there%20an%20updated%20guidance%20on%20how%20one%20would%20use%20an%20existing%20content%20search%20to%20be%20included%20in%20the%20ediscovery%20case%20instead%20of%20recreating%20the%20search.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-55221%22%20slang%3D%22en-US%22%3ERe%3A%20Converting%20an%20exist%20Content%20Search%20to%20an%20ediscovery%20search%20in%20the%20new%20Security%20and%20Compliance%20Mo%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-55221%22%20slang%3D%22en-US%22%3E%3CP%3EWell%2C%20I%20meant%20this%20as%20an%20example%26nbsp%3Bthat%20you%20need%20to%20adapt.%26nbsp%3BYou%20can%20specify%20a%20Case%20for%20new%20compliance%20search%20via%20the%20-Case%20parameter%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ENew-ComplianceSearch%20%22blabla%22%20-Case%20%22blahblah%22%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-55074%22%20slang%3D%22en-US%22%3ERe%3A%20Converting%20an%20exist%20Content%20Search%20to%20an%20ediscovery%20search%20in%20the%20new%20Security%20and%20Compliance%20Mo%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-55074%22%20slang%3D%22en-US%22%3E%3CP%3EThanks%20Vasil%2C%3C%2FP%3E%3CP%3EI%26nbsp%3Bwas%20able%20to%20clone%20an%20existing%20Compliance%20Search%2C%20however%20how%26nbsp%3Bdo%20i%20associate%20the%20cloned%20search%20with%20a%20new%20compliance%20case.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWhen%20creating%20an%20new%20compliance%20case%20i%20dont%20see%20any%20options%20to%20associate%20%2F%20use%20an%20existing%20compliance%20search..%20Would%20this%20be%20possible%20via%20the%20use%20of%20powershell.%3F%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-54796%22%20slang%3D%22en-US%22%3ERe%3A%20Converting%20an%20exist%20Content%20Search%20to%20an%20ediscovery%20search%20in%20the%20new%20Security%20and%20Compliance%20Mo%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-54796%22%20slang%3D%22en-US%22%3E%3CP%3EYou%20should%20be%20able%20to%20do%20it%20via%20PowerShell.%20Here's%20an%20example%20script%20that%20can%20be%20used%20to%20create%20a%20duplicate%20of%20a%20search%3A%20%3CA%20href%3D%22https%3A%2F%2Fsupport.office.com%2Fen-us%2Farticle%2FClone-a-Content-Search-in-the-Office-365-Security-Compliance-Center-7b40eeaa-544c-4534-b89b-9f79998e374c%3Fui%3Den-US%26amp%3Brs%3Den-US%26amp%3Bad%3DUS%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fsupport.office.com%2Fen-us%2Farticle%2FClone-a-Content-Search-in-the-Office-365-Security-Compliance-Center-7b40eeaa-544c-4534-b89b-9f79998e374c%3Fui%3Den-US%26amp%3Brs%3Den-US%26amp%3Bad%3DUS%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ENow%2C%20the%20searches%20contained%20in%20eDiscovery%20cases%20are%20accessed%20via%20the%20same%20cmdlet%20(Get-ComplianceSearch)%2C%20but%20you%20need%20to%20specify%20the%20-Case%20parameter%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EGet-CComplianceSearch%20-Case%20test%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ESo%20adjsut%20that%20in%20the%20script%2C%20and%20also%20include%20a%20%22remove%20search%22%20action%20if%20you%20want.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Occasional Contributor

Any idea if there is a way on how to convert/include an existing Content search in the Ediscovery Case Search.

There was some guidance on how to convert the existing content search to an Ediscovery workflow in EXO

https://support.office.com/en-us/article/Use-Content-Search-in-your-eDiscovery-workflow-55f31488-288...

However since MS is moving to the new Security and Compliance Module is there an updated guidance on how one would use an existing content search to be included in the ediscovery case instead of recreating the search.

3 Replies

You should be able to do it via PowerShell. Here's an example script that can be used to create a duplicate of a search: https://support.office.com/en-us/article/Clone-a-Content-Search-in-the-Office-365-Security-Complianc...

 

Now, the searches contained in eDiscovery cases are accessed via the same cmdlet (Get-ComplianceSearch), but you need to specify the -Case parameter:

 

Get-CComplianceSearch -Case test

 

So adjsut that in the script, and also include a "remove search" action if you want.

Thanks Vasil,

I was able to clone an existing Compliance Search, however how do i associate the cloned search with a new compliance case.

 

When creating an new compliance case i dont see any options to associate / use an existing compliance search.. Would this be possible via the use of powershell.??

 

 

Well, I meant this as an example that you need to adapt. You can specify a Case for new compliance search via the -Case parameter:

 

New-ComplianceSearch "blabla" -Case "blahblah"