Ediscovery or search mailboxes for subject and date.

Craig Garland 286 Reputation points
2022-11-29T01:59:27.03+00:00

Hi,

So, I have been asked to create a month report.

Requirements:
Search selected mailboxes (Defined by security group)
Search for Subject
Search all emails over the last month.

This will be an ongoing search happening every month. It would be best if the results of the search could be email or at least made available to non-administrators.

I have looked at ediscovery and although this creates the search I am looking. I dont see any method of scheduling these searches and sending a report monthly.

What I would like to know is if ediscovery is the correct feature to use, or if there is a better O365 feature.

Thanks for your time in advance.

Craig

Microsoft Exchange Online Management
Microsoft Exchange Online Management
Microsoft Exchange Online: A Microsoft email and calendaring hosted service.Management: The act or process of organizing, handling, directing or controlling something.
4,361 questions
{count} votes

Accepted answer
  1. KyleXu-MSFT 26,241 Reputation points
    2022-11-30T07:23:01.683+00:00

    @Craig Garland

    The Exchange online eDiscovery function has been moved to Microsoft 365 compliance center.

    For this question, I would suggest you used Content Search as below, you need to connect to Security & Compliance first:

    $from = "2022-"+((Get-Date).Month-(1).tostring())+"-1"  
    $to = "2022-"+((Get-Date).Month-(1).tostring())+"-30"  
    New-ComplianceSearch -Name "TestSearch" -ExchangeLocation "user@domain.onmicrosoft.com" -ContentMatchQuery "(Subject:'Test*') -and (received:$from..$to)"  
    Start-ComplianceSearch TestSearch  
    

    After the search complete, you could use command below to create the export request:

    New-ComplianceSearchAction -SearchName "TestSearch" -Export  
    

    You could create two Schedule Task, the first task to create the search request, another one create the export request after about 30 minutes.


    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.



0 additional answers

Sort by: Most helpful