After you create a case and run a collection job, reviewers can search the data that was collected in the case.
Procedure
-
From the navigation pane, go to Data Insights.
The Data Insights page appears.
-
Click Case manager.
The Case manager page appears.
-
Click the case.
The case page appears.
-
On the Search tab, perform the search:
-
To perform a simple search, use the search box and the filters.
-
To filter the search based on the type of data, select from the following data types, and then click OK.
-
Email
-
Exchange journaling
-
Exchange mailbox
-
File
-
File system
-
OneDrive for Business
-
SharePoint Online
-
Teams
-
-
To perform an advanced search, do the following:
-
Click Advanced search.
The Advanced search dialog box appears.
-
Enter search criteria.
-
Click Submit.
-
-
To perform a search by using a saved search query, do the following:
-
In the right area of the page, click Query set.
The Queries dialog box appears.
-
In the Action column for the search query, click the action button , and then click Run query.
-
-