Google Vault - Search Groups

This is a playbook for performing Google Vault search in Groups and display the results.

Google Vault · 10 tasks · 14 inputs · 16 outputs

Inputs

  • matterID — matterID
  • exportName — Export Name
  • dataScope — Choice of Search scope
  • groups — Enter one or more Groups separated by commas. You can search up to 50 Groups.
  • timeFrame — Search time frame. E.g: "1 min ago","2 weeks ago","3 months ago"
  • startTime — UTC start time (2018-10-16T12:59:02.584000Z)
  • endTime — UTC end time (2018-10-16T12:59:02.584000Z)
  • terms — Add specific terms for the search (subject:example)
  • exportPST — Export format
  • exportMBOX — Export format
  • pollInterval — Interval to check export status (minutes)
  • pollTimeout — Timeout to terminate the poll (minutes)
  • maxResultForDisplay — The maximal number of result to be displayed
  • downloadFile — If set to true the export file created will be downloaded into the War Room

Outputs

  • GoogleVault.Matter.Export.MatterID — Matter ID
  • GoogleVault.Matter.Export.ExportID — Export ID
  • GoogleVault.Matter.Export.Name — Export's name
  • GoogleVault.Matter.Export.CreateTime — Export's creation time
  • GoogleVault.Matter.Export.Results.CC — CC of the message
  • GoogleVault.Matter.Export.Results.BCC — BCC of the message
  • GoogleVault.Matter.Export.Results.DateSent — The date the message
  • GoogleVault.Matter.Export.Results.From — The sender of the message
  • GoogleVault.Matter.Export.Results.Subject — The subject of the message
  • GoogleVault.Matter.Export.Results.DateReceived — The date the message was received
  • GoogleVault.Matter.Export.Results.To — The address the message was sent to
  • GoogleVault.Matter.Export.Status — Export Status (COMPLETED,FAILED,IN_PROGRESS)
  • GoogleVault.Matter.Export.BucketName — Bucket holder name for this export
  • GoogleVault.Matter.Export.DownloadID — ID to be used by the download-export command
  • GoogleVault.Matter.Export.ViewID — ID to be used by the get-X-results command (X=drive/mail/groups)
  • GoogleVault.Matter — Matter object

Commands used

gvault-create-export-groups gvault-download-results gvault-export-status gvault-get-groups-results

Flowchart

yes yes Start Start Create Group Export - gvault-create-export-groups Create Group Export gvault-create-export-groups GenericPolling - GenericPolling GenericPolling GenericPolling Get Groups results - gvault-get-groups-results Get Groups results gvault-get-groups-results Done Done Check downloadFile Check downloadFile Get Export status to context - gvault-export-status Get Export status to context gvault-export-status Download Export file - gvault-download-results Download Export file gvault-download-results Check if status COMPLETED Check if status COMPLETED Polling Timeout - PrintErrorEntry Polling Timeout PrintErrorEntry