O365 - Security And Compliance - Search Action - Delete Deprecated

Deprecated. Use the Microsoft Graph Security - Search And Delete Emails playbook instead. This playbook performs the following steps: 1. Creates a new compliance search action Purge - Hard or Soft. 2. Waits for the compliance search action to complete. 3. Retrieves the delete search action.

Microsoft Exchange Online · 8 tasks · 4 inputs · 32 outputs

Inputs

  • search_name — The name of the compliance search.
  • delete_type — Purge type. Possible values are: "Soft" and "Hard". Default is "Soft".
  • polling_timeout — Search action polling timeout.
  • polling_interval — Search action polling interval.

Outputs

  • O365.SecurityAndCompliance.ContentSearch.SearchAction.Action — Security and compliance search action type. Either "Purge" or "Preview".
  • O365.SecurityAndCompliance.ContentSearch.SearchAction.AllowNotFoundExchangeLocationsEnabled — Whether to include mailboxes other than regular user mailboxes in the compliance search.
  • O365.SecurityAndCompliance.ContentSearch.SearchAction.AzureBatchFrameworkEnabled — Whether the Azure Batch Framework is enabled for job processing.
  • O365.SecurityAndCompliance.ContentSearch.SearchAction.CaseId — Identity of a Core eDiscovery case which is associated with the compliance search.
  • O365.SecurityAndCompliance.ContentSearch.SearchAction.CaseName — Name of a Core eDiscovery case which is associated with the compliance search.
  • O365.SecurityAndCompliance.ContentSearch.SearchAction.CreatedBy — Security and compliance search action creator.
  • O365.SecurityAndCompliance.ContentSearch.SearchAction.CreatedTime — Security and compliance search action creation time.
  • O365.SecurityAndCompliance.ContentSearch.SearchAction.Description — Security and compliance search action description.
  • O365.SecurityAndCompliance.ContentSearch.SearchAction.Errors — Security and compliance search action errors.
  • O365.SecurityAndCompliance.ContentSearch.SearchAction.EstimateSearchJobId — Security and compliance search action job ID estimation.
  • O365.SecurityAndCompliance.ContentSearch.SearchAction.EstimateSearchRunId — Security and compliance search action run ID estimation.
  • O365.SecurityAndCompliance.ContentSearch.SearchAction.ExchangeLocation — Security and compliance search action exchange locations to include.
  • O365.SecurityAndCompliance.ContentSearch.SearchAction.ExchangeLocationExclusion — Security and compliance search action exchange locations to exclude.
  • O365.SecurityAndCompliance.ContentSearch.SearchAction.Identity — Security and compliance search action identity.
  • O365.SecurityAndCompliance.ContentSearch.SearchAction.IsValid — Whether the security and compliance search action is valid.
  • O365.SecurityAndCompliance.ContentSearch.SearchAction.JobEndTime — Security and compliance search action job end time.
  • O365.SecurityAndCompliance.ContentSearch.SearchAction.JobId — Security and compliance search action job ID.
  • O365.SecurityAndCompliance.ContentSearch.SearchAction.JobRunId — Security and compliance search action job run ID.
  • O365.SecurityAndCompliance.ContentSearch.SearchAction.JobStartTime — Security and compliance search action job start time.
  • O365.SecurityAndCompliance.ContentSearch.SearchAction.LastModifiedTime — Security and compliance search action last modified time.
  • O365.SecurityAndCompliance.ContentSearch.SearchAction.Name — Security and compliance search action name.
  • O365.SecurityAndCompliance.ContentSearch.SearchAction.PublicFolderLocation — Security and compliance search action public folder locations to include.
  • O365.SecurityAndCompliance.ContentSearch.SearchAction.PublicFolderLocationExclusion — Security and compliance search action public folder locations to exclude.
  • O365.SecurityAndCompliance.ContentSearch.SearchAction.Results — Security and compliance search action results.
  • O365.SecurityAndCompliance.ContentSearch.SearchAction.Retry — Whether to retry if the search action failed.
  • O365.SecurityAndCompliance.ContentSearch.SearchAction.RunBy — Security and compliance search action run by UPN (email address).
  • O365.SecurityAndCompliance.ContentSearch.SearchAction.RunspaceId — Security and compliance search action run space ID.
  • O365.SecurityAndCompliance.ContentSearch.SearchAction.SearchName — Security and compliance search action search name.
  • O365.SecurityAndCompliance.ContentSearch.SearchAction.SharePointLocation — Security and compliance search action SharePoint locations to include.
  • O365.SecurityAndCompliance.ContentSearch.SearchAction.SharePointLocationExclusion — Security and compliance search action SharePoint locations to exclude.
  • O365.SecurityAndCompliance.ContentSearch.SearchAction.Status — Security and compliance search action status. Either "Started" or "Completed".
  • O365.SecurityAndCompliance.ContentSearch.SearchAction.TenantId — Security and compliance search action Tenant ID.

Commands used

o365-sc-get-search-action o365-sc-new-search-action

Flowchart

Hard delete Soft delete Start Start Search action - Hard delete - o365-sc-new-search-action Search action - Hard delete o365-sc-new-search-action Waiting for delete operation to complete - GenericPolling Waiting for delete operat... GenericPolling Search action completed. Search action completed. Perform a hard delete on the compliance search results? Perform a hard delete on ... Search action - Soft delete. - o365-sc-new-search-action Search action - Soft delete. o365-sc-new-search-action Get the search action. - o365-sc-get-search-action Get the search action. o365-sc-get-search-action Error - Invalid delete_type parameter. - PrintErrorEntry Error - Invalid delete_ty... PrintErrorEntry