Edit

ediscoveryReviewSetQuery resource type

  • Article

Namespace: microsoft.graph.security

Important

APIs under the /beta version in Microsoft Graph are subject to change. Use of these APIs in production applications is not supported. To determine whether an API is available in v1.0, use the Version selector.

Represents a review set query, which is used to query and cull data stored in an eDiscovery reviewSet.

Methods

Method Return type Description
List ediscoveryReviewSetQueries microsoft.graph.security.ediscoveryReviewSetQuery collection Get a list of the ediscoveryReviewSetQuery objects and their properties.
Create ediscoveryReviewSetQuery microsoft.graph.security.ediscoveryReviewSetQuery Create a new ediscoveryReviewSetQuery object.
Get ediscoveryReviewSetQuery microsoft.graph.security.ediscoveryReviewSetQuery Read the properties and relationships of an ediscoveryReviewSetQuery object.
Update ediscoveryReviewSetQuery microsoft.graph.security.ediscoveryReviewSetQuery Update the properties of an ediscoveryReviewSetQuery object.
Delete ediscoveryReviewSetQuery None Delete an ediscoveryReviewSetQuery object.
export None Export documents that match the specified query from a review set.
applyTags None Apply tags to documents that match the specified query.
run microsoft.graph.security.ediscoveryFile collection Get files from the query.

Properties

Property Type Description
createdBy identitySet The user who created the query.
createdDateTime DateTimeOffset The time and date when the query was created. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z
displayName String The name of the query.
id String The unique identifier of the query. Read-only.
lastModifiedBy identitySet The user who last modified the query.
lastModifiedDateTime DateTimeOffset The date and time the query was last modified. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z
query String The query string in KQL (Keyword Query Language) query. For details, see Document metadata fields in eDiscovery (Premium). This field maps directly to the keywords condition. You can refine searches by using fields listed in the searchable field name paired with values; for example, subject:"Quarterly Financials" AND Date>=06/01/2016 AND Date<=07/01/2016.

Relationships

None.

JSON representation

The following is a JSON representation of the resource.

{
  "@odata.type": "#microsoft.graph.security.ediscoveryReviewSetQuery",
  "id": "String (identifier)",
  "displayName": "String",
  "description": "String",
  "createdBy": {
    "@odata.type": "microsoft.graph.identitySet"
  },
  "createdDateTime": "String (timestamp)",
  "lastModifiedBy": {
    "@odata.type": "microsoft.graph.identitySet"
  },
  "lastModifiedDateTime": "String (timestamp)",
  "contentQuery": "String"
}