Modify an eDiscovery Search

Modifying an eDiscovery search is a five-step process. This topic describes the steps required to modify an existing eDiscovery search. You may have to refer to the links provided in some steps if you need more information. To modify an existing eDiscovery search, you can:

  • Specify the eDiscovery search name and optionally, a description.
  • Select the users and groups to search.
  • Set the search criteria for the users and groups to search.
  • Specify in-place hold settings for messages included in the search.
  • Assign or create new users or groups that can access the search results.

To modify an eDiscovery search, complete the steps in the following procedure.

  1. On the eDiscovery page in the Compliance module, in the Current eDiscovery Searches table, click the eDiscovery search that you want to modify in the Search Name column. The Edit eDiscovery Search - < eDiscovery Search Name > dialog is displayed.
  2. In the Name & Description section:
    1. In the eDiscovery Search Name field, enter or modify up to 60 characters for the name of the search.
    2. Optionally, in eDiscovery Description field, enter or modify up to 250 characters for the description of the search displayed on the eDiscovery page, and then click Next.

      The user name and timestamp of the last modification to the eDiscovery search is displayed in the Last Updated by field.

  3. In the Select User Accounts section, you can limit the search to specific users or groups. You can:
    1. Select Any User Account to add any users to the eDiscovery search, and then click Next.
           - or -
    2. Select Select Users / Groups, and then on the Users tab or User Groups tab, select or remove specific users, specific groups of users, or user groups, and then click Next. For more information, see Selecting Users.
  4. In the Set Search Criteria section, on the Messages tab, modify which messages should be included in eDiscovery search results by selecting:
    1. Include messages from / to people - To include messages sent to or from users, select one of the following:
      1. Standard settings - Messages from all users sent or received are included in eDiscovery search results.
      2. Advanced settings - Select messages for specific Senders and/or Recipients are included in eDiscovery search results. Click the Add  icon to open the Select who is sending/receiving the message dialog. Select the users that you want to included in eDiscovery search results messages for, and then click Done. For more information, see Selecting Users.
    2. Include messages from Bots - To include messages in eDiscovery search results for Bot messages, select one of the following:
      1. Standard settings - Bot posts from all Bots are ncluded in eDiscovery search results.
      2. Advanced settings - Select specific Bots to include in eDiscovery search results posts from. Click the Add  icon to open the Select Bots dialog. Select the Bots that you want to include in eDiscovery search results, and then click Done.
  5. In the Set Search Criteria section, on the Spaces tab, modify which space messages should be included in eDiscovery search results by selecting Include messages from spaces. When selected, choose one of:
    1. Standard settings - All posts, comments, and direct messages from the users and groups defined for this search are included.
    2. Advanced settings - Select one or more message types, spaces, and rooms to include in this search.
  6. In the Set Search Criteria section, on the Additional Criteria tab, modify which messages should be included in eDiscovery search results by selecting:
    1. Attachments (for example, Images, Videos, Files) - Select to include or exclude messages and/or posts with or without attachments. Otherwise, all messages and posts with attachments are included in eDiscovery search results.
    2. Message control policies - Select to include or exclude messages with or without message control policies. Otherwise, all messages and posts with message control policies are included in eDiscovery search results.
    3. Date Range - Select to include messages only during specified date range. Otherwise, all messages and posts for any date are included in eDiscovery search results.
    4. Keywords - Select to include only messages or posts that contain any of the specified keywords. Otherwise, all messages and posts are included in eDiscovery search results.
  7. Click Next.
  8. In the In-Place Hold Settings section, you can:
    1. Clear Enable In-Place Hold to create an eDiscovery search to use as a query to show message results based on the users and search criteria specified, and then click Next.
           - or -
    2. Select Enable In-Place Hold to, and then select Hold Indefinitely or specify the Hold for this time period field to specify the length of the litigation hold for the messages in the search result, and then click Next.

      In-Place Hold is not available if all user accounts are selected in the Select User Accounts section.

  9. Optionally, in the Assign Access section, you can enable or remove read-only access for managed users and groups that you add to provide read-only access to view the eDiscovery search results. For more information, see Assign Users and Groups to an eDiscovery Search
    1.  To assign access for users and groups to an eDiscovery search:
      1. On the Users tab, click Add Users. On the Select Users and Groups dialog, on the Managed Users tab, select one or more managed users, and then click Assign. For more information, see Selecting Users.
      2. On the Groups tab, click Add Groups. On the Select Users and Groups dialog, on the Groups tab, select one or more groups, and then click Assign. For more information, see Selecting Users.
    2. To delete access for users or groups to an eDiscovery search:
      1. On the Users tab, select one or more users in the User Name column, and then click Delete.
      2. On the Groups tab, select one or more groups in the Group Name column, and then click Delete.
  10. Click Save eDiscovery.

The eDiscovery search is saved and available to run to you and any users enabled for access to the eDiscovery search can view the read-only search results.

Comments