Google Vault - Search Mail

This is a playbook for performing Google Vault search in Mail accounts and display the results.

Inputs

matterID — matterID
exportName — Export Name
dataScope — Choice of Search scope
searchMethod — Choice of Search method
emails — If the search method is set to Specific Accounts (separated by comma)
ou — The organizational unit (specify only if the search method is set to Organizational Unit)
includeDrafts — Include/Exclude drafts in the search
timeFrame — Search time frame. E.g: "1 min ago","2 weeks ago","3 months ago"
startTime — UTC start time (2018-10-16T12:59:02.584000Z)
endTime — UTC end time (2018-10-16T12:59:02.584000Z)
terms — Add specific terms for the search (subject:example)
exportPST — Export format
exportMBOX — Export format
pollInterval — Interval to check export status (minutes)
pollTimeout — Timeout to terminate the poll (minutes)
maxResultForDisplay — The maximal number of result to be displayed
downloadFile — If set to true the export file created will be downloaded into the War Room

GoogleVault.Matter.Export.MatterID — Matter ID
GoogleVault.Matter.Export.ExportID — Export ID
GoogleVault.Matter.Export.Name — Export's name
GoogleVault.Matter.Export.CreateTime — Export's creation time
GoogleVault.Matter.Export.Results.CC — CC of the mail
GoogleVault.Matter.Export.Results.BCC — BCC of the mail
GoogleVault.Matter.Export.Results.DateSent — The date the email was sent
GoogleVault.Matter.Export.Results.From — The sender of the email
GoogleVault.Matter.Export.Results.Subject — The subject of the email
GoogleVault.Matter.Export.Results.DateReceived — The date the email was received
GoogleVault.Matter.Export.Results.To — The address the email was sent to
GoogleVault.Matter.Export.Status — Export Status (COMPLETED,FAILED,IN_PROGRESS)
GoogleVault.Matter.Export.BucketName — Bucket holder name for this export
GoogleVault.Matter.Export.DownloadID — ID to be used by the download-export command
GoogleVault.Matter.Export.ViewID — ID to be used by the get-X-results command (X=drive/mail/groups)
GoogleVault.Matter — Matter object