eventQuery resource type

Namespace: microsoft.graph.security

Important

APIs under the /beta version in Microsoft Graph are subject to change. Use of these APIs in production applications is not supported. To determine whether an API is available in v1.0, use the Version selector.

Represents the workload (SharePoint Online, OneDrive for Business, Exchange Online) and identification information associated with a retention event.

Properties

Property	Type	Description
queryType	microsoft.graph.security.queryType	Represents the type of query associated with an event. 'files' for SPO and ODB and 'messages' for EXO.The possible values are: files, messages, unknownFutureValue.
query	String	Represents unique identification for the query. 'Asset ID' for SharePoint Online and OneDrive for Business, 'keywords' for Exchange Online.

Relationships

None.

JSON representation

Here's a JSON representation of the resource.

{
  "@odata.type": "#microsoft.graph.security.eventQuery",
  "queryType": "String",
  "query": "String"
}