Google Vault - Search Drive
This is a playbook for performing Google Vault search in Drive accounts and display the results.
Google Vault · 10 tasks · 18 inputs · 17 outputs
Inputs
matterID— matterIDexportName— exportNamedataScope— Choice of Search scopesearchMethod— Choice of Search method. Default is: 'Specific Accounts' -requires emails argument. 'Organizational Unit' - requires ou argument. 'Team Drive'emails— If the search method is set to Specific Accounts (separated by comma)ou— If the search method is set to Specific Accounts (separated by comma)teamDrive— If the search method is set to Team DrivesincludeTeamDrives— Include/Exclude team drivestimeFrame— Search time frame. E.g: "1 min ago","2 weeks ago","3 months ago"startTime— UTC start time (2018-10-16T12:59:02.584000Z)endTime— UTC end time (2018-10-16T12:59:02.584000Z)terms— Add specific terms for the search (subject:example)exportPST— Export formatexportMBOX— Export formatpollInterval— Interval to check export status (minutes) For big data inquires increase both 'pollInterval' and 'pollTimeout'pollTimeout— Timeout to terminate the poll (minutes). For big data inquires increase both 'pollTimeout' and 'pollInterval'maxResultForDisplay— The maximal number of result to be displayeddownloadFile— If set to true the export file created will be downloaded into the War Room
Outputs
GoogleVault.Matter.Export.MatterID— Matter IDGoogleVault.Matter.Export.ExportID— Export IDGoogleVault.Matter.Export.Name— Export's nameGoogleVault.Matter.Export.CreateTime— Export's creation timeGoogleVault.Matter.Export.Results.Title— Title of the fileGoogleVault.Matter.Export.Results.Author— Author of the fileGoogleVault.Matter.Export.Results.Others— Other users related to the fileGoogleVault.Matter.Export.Results.Viewers— Viewers of the fileGoogleVault.Matter.Export.Results.DateModified— The date the file was modifiedGoogleVault.Matter.Export.Results.DateCreated— The date the file was createdGoogleVault.Matter.Export.Results.DocType— The type of the file (extension)GoogleVault.Matter.Export.Results.MD5— The MD5 of the file (SHA1)GoogleVault.Matter.Export.Status— Export Status (COMPLETED,FAILED,IN_PROGRESS)GoogleVault.Matter.Export.BucketName— Bucket holder name for this exportGoogleVault.Matter.Export.DownloadID— ID to be used by the download-export commandGoogleVault.Matter.Export.ViewID— ID to be used by the get-X-results command (X=drive/mail/groups)GoogleVault.Matter— Matter object
Commands used
gvault-create-export-drive
gvault-download-results
gvault-export-status
gvault-get-drive-results