Google Vault - Search Mail

Inputs

• matterID — matterID
• exportName — Export Name
• dataScope — Choice of Search scope
• searchMethod — Choice of Search method
• emails — If the search method is set to Specific Accounts (separated by comma)
• ou — The organizational unit (specify only if the search method is set to Organizational Unit)
• includeDrafts — Include/Exclude drafts in the search
• timeFrame — Search time frame. E.g: "1 min ago","2 weeks ago","3 months ago"
• startTime — UTC start time (2018-10-16T12:59:02.584000Z)
• endTime — UTC end time (2018-10-16T12:59:02.584000Z)
• terms — Add specific terms for the search (subject:example)
• exportPST — Export format
• exportMBOX — Export format
• pollInterval — Interval to check export status (minutes)
• pollTimeout — Timeout to terminate the poll (minutes)
• maxResultForDisplay — The maximal number of result to be displayed
• downloadFile — If set to true the export file created will be downloaded into the War Room

Outputs

• GoogleVault.Matter.Export.MatterID — Matter ID
• GoogleVault.Matter.Export.ExportID — Export ID
• GoogleVault.Matter.Export.Name — Export's name
• GoogleVault.Matter.Export.CreateTime — Export's creation time
• GoogleVault.Matter.Export.Results.CC — CC of the mail
• GoogleVault.Matter.Export.Results.BCC — BCC of the mail
• GoogleVault.Matter.Export.Results.DateSent — The date the email was sent
• GoogleVault.Matter.Export.Results.From — The sender of the email
• GoogleVault.Matter.Export.Results.Subject — The subject of the email
• GoogleVault.Matter.Export.Results.DateReceived — The date the email was received
• GoogleVault.Matter.Export.Results.To — The address the email was sent to
• GoogleVault.Matter.Export.Status — Export Status (COMPLETED,FAILED,IN_PROGRESS)
• GoogleVault.Matter.Export.BucketName — Bucket holder name for this export
• GoogleVault.Matter.Export.DownloadID — ID to be used by the download-export command
• GoogleVault.Matter.Export.ViewID — ID to be used by the get-X-results command (X=drive/mail/groups)
• GoogleVault.Matter — Matter object

Commands used