ediscoveryReviewSetQuery resource type
Namespace: microsoft.graph.security
Represents a review set query, which is used to query and cull data stored in a Microsoft Purview eDiscovery reviewSet.
Methods
Method | Return type | Description |
---|---|---|
List | microsoft.graph.security.ediscoveryReviewSetQuery collection | Get a list of the ediscoveryReviewSetQuery objects and their properties. |
Create | microsoft.graph.security.ediscoveryReviewSetQuery | Create a new ediscoveryReviewSetQuery object. |
Get | microsoft.graph.security.ediscoveryReviewSetQuery | Read the properties and relationships of an ediscoveryReviewSetQuery object. |
Update | microsoft.graph.security.ediscoveryReviewSetQuery | Update the properties of an ediscoveryReviewSetQuery object. |
Delete | None | Delete an ediscoveryReviewSetQuery object. |
Apply tags | None | Apply tags to documents that match the specified query. |
Export | None | Export documents that match the specified query from a review set. |
Properties
Property | Type | Description |
---|---|---|
contentQuery | String | The query string in KQL (Keyword Query Language) query. For details, see Document metadata fields in eDiscovery (Premium). This field maps directly to the keywords condition. You can refine searches by using fields listed in the searchable field name paired with values; for example, subject:"Quarterly Financials" AND Date>=06/01/2016 AND Date<=07/01/2016. |
createdBy | identitySet | The user who created the query. |
createdDateTime | DateTimeOffset | The time and date when the query was created. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z |
description | String | The description of the eDiscovery search. |
displayName | String | The name of the query. |
id | String | The unique identifier of the query. Read-only. |
lastModifiedBy | identitySet | The user who last modified the query. |
lastModifiedDateTime | DateTimeOffset | The date and time the query was last modified. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z |
Relationships
None.
JSON representation
The following JSON representation shows the resource type.
{
"@odata.type": "#microsoft.graph.security.ediscoveryReviewSetQuery",
"id": "String (identifier)",
"displayName": "String",
"description": "String",
"createdBy": {
"@odata.type": "microsoft.graph.identitySet"
},
"createdDateTime": "String (timestamp)",
"lastModifiedBy": {
"@odata.type": "microsoft.graph.identitySet"
},
"lastModifiedDateTime": "String (timestamp)",
"contentQuery": "String"
}