Modifying a Definition in a Case

You can modify a definition in a case for email and file system data. Changes that you make to case definition apply only to the subsequent data collection jobs.

• If you add filters to an existing definition in a case, then the data collection job honors new filters from the next run.

• If you delete a custodian in a case definition, then the data collection job stops collecting data for the custodian from the next run. However, the custodian data will be available for search until you close and delete the case.

Procedure

1. From the Command Center navigation pane, go to Comply > eDiscovery & Compliance.

2. Click Case manager.

   The Case manager page appears.

3. In the Name column, click the case.

   The case page appears.

4. In the Definitions table, click the definition.

   The definition details page appears.

5. Under General, review the following information:

   • Definition name: The name of the definition.

   • From the Data Collection list, select one of the following options:

     • Continuous: Incremental data is collected continuously based on the Recovery Point Objective (RPO) of the backup plan.

     • One time only: Data is collected only one time.

6. For File servers as a data type, expand File servers, enter the names of the servers or server groups, and then click OK.

7. Under Custodians, you can do one of the following:

   • For email as a data type, enter the names or email addresses of the users or user groups whose data you want to add to the case, and then click Add.

     Note

     • If you are processing Exchange Online data, then you must enter the SMTP address for the automatic suggestion feature to work.

     • If you are processing Exchange journal mailbox data, then you must enter the user mailbox email address and not the journal mailbox email address.

   • For File servers and/or Laptops as a data type, enter the names of the users or user groups or their email address, and then click Add.

     Note

     To add multiple custodians, separate each custodian with a comma. For example, enter Adhira Venkatesh, Bohai Wang, mtolliver@example.com.

8. Optional: Under Additional criteria, configure additional filter criteria to the data included in the case.

   Only data that meets the filter criteria that you define is included in the case.

9. Click Save.