Best Means of Searching for PST Files in OneDrive (and SharePoint)

Question

We're working on Known Folder Move but want to ensure that PSTs stored to ODFB are cleaned up in advance to lessen our storage tickets. Wondering the best means of doing this search? I attempted in Security and Compliance but it has constantly come back empty regardless of the structure

Answer 1

hi @Andrew Geddes ,

Disappointing to hear the search in security & compliance didn't work, that would have been my first suggestion.

I'd pursue this with Microsoft support, you'd expect all one drive/sharepoint activities to be searchable.

If you're running Defender for endpoint you may be able to see activity in the endpoint events by running a kql search.

Answer 2

Hi @Andrew Geddes ,

Like DavidBroggy-5270 said, you could do this by using KQL search queries. KQL is the search syntax supported in SharePoint for building search queries.
Reference: Keyword Query Language (KQL) syntax reference

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.