O365 - Security And Compliance - Search Action - Preview Deprecated

Deprecated. Use the Microsoft Graph Security - Search And Delete Emails playbook instead. This playbook perform: 1. Creates a new compliance search action - Preview (Base on created compliance search). 2. Waits for the preview action to complete. 3. Retrieves the preview results.

Microsoft Exchange Online · 6 tasks · 3 inputs · 32 outputs

Inputs

  • search_name — The name of the compliance search.
  • polling_interval — Search action polling interval.
  • polling_timeout — Search action polling timeout.

Outputs

  • O365.SecurityAndCompliance.ContentSearch.SearchAction.Action — Security and compliance search action type. Either "Purge" or "Preview".
  • O365.SecurityAndCompliance.ContentSearch.SearchAction.AllowNotFoundExchangeLocationsEnabled — Whether to include mailboxes other than regular user mailboxes in the compliance search.
  • O365.SecurityAndCompliance.ContentSearch.SearchAction.AzureBatchFrameworkEnabled — Whether the Azure Batch Framework is enabled for job processing.
  • O365.SecurityAndCompliance.ContentSearch.SearchAction.CaseId — Identity of a Core eDiscovery case which is associated with the compliance search.
  • O365.SecurityAndCompliance.ContentSearch.SearchAction.CaseName — Name of a Core eDiscovery case which is associated with the compliance search.
  • O365.SecurityAndCompliance.ContentSearch.SearchAction.CreatedBy — Security and compliance search action creator.
  • O365.SecurityAndCompliance.ContentSearch.SearchAction.CreatedTime — Security and compliance search action creation time.
  • O365.SecurityAndCompliance.ContentSearch.SearchAction.Description — Security and compliance search action description.
  • O365.SecurityAndCompliance.ContentSearch.SearchAction.Errors — Security and compliance search action errors.
  • O365.SecurityAndCompliance.ContentSearch.SearchAction.EstimateSearchJobId — Security and compliance search action job ID estimation.
  • O365.SecurityAndCompliance.ContentSearch.SearchAction.EstimateSearchRunId — Security and compliance search action run ID estimation.
  • O365.SecurityAndCompliance.ContentSearch.SearchAction.ExchangeLocation — Security and compliance search action exchange locations to include.
  • O365.SecurityAndCompliance.ContentSearch.SearchAction.ExchangeLocationExclusion — Security and compliance search action exchange locations to exclude.
  • O365.SecurityAndCompliance.ContentSearch.SearchAction.Identity — Security and compliance search action identity.
  • O365.SecurityAndCompliance.ContentSearch.SearchAction.IsValid — Whether the security and compliance search action is valid.
  • O365.SecurityAndCompliance.ContentSearch.SearchAction.JobEndTime — Security and compliance search action job end time.
  • O365.SecurityAndCompliance.ContentSearch.SearchAction.JobId — Security and compliance search action job ID.
  • O365.SecurityAndCompliance.ContentSearch.SearchAction.JobRunId — Security and compliance search action job run ID.
  • O365.SecurityAndCompliance.ContentSearch.SearchAction.JobStartTime — Security and compliance search action job start time.
  • O365.SecurityAndCompliance.ContentSearch.SearchAction.LastModifiedTime — Security and compliance search action last modified time.
  • O365.SecurityAndCompliance.ContentSearch.SearchAction.Name — Security and compliance search action name.
  • O365.SecurityAndCompliance.ContentSearch.SearchAction.PublicFolderLocation — Security and compliance search action public folder locations to include.
  • O365.SecurityAndCompliance.ContentSearch.SearchAction.PublicFolderLocationExclusion — Security and compliance search action public folder locations to exclude.
  • O365.SecurityAndCompliance.ContentSearch.SearchAction.Results — Security and compliance search action results.
  • O365.SecurityAndCompliance.ContentSearch.SearchAction.Retry — Whether to retry if the search action failed.
  • O365.SecurityAndCompliance.ContentSearch.SearchAction.RunBy — Security and compliance search action run by UPN (email address).
  • O365.SecurityAndCompliance.ContentSearch.SearchAction.RunspaceId — Security and compliance search action run space ID.
  • O365.SecurityAndCompliance.ContentSearch.SearchAction.SearchName — Security and compliance search action search name.
  • O365.SecurityAndCompliance.ContentSearch.SearchAction.SharePointLocation — Security and compliance search action SharePoint locations to include.
  • O365.SecurityAndCompliance.ContentSearch.SearchAction.SharePointLocationExclusion — Security and compliance search action SharePoint locations to exclude.
  • O365.SecurityAndCompliance.ContentSearch.SearchAction.Status — Security and compliance search action status. Either "Started" or "Completed".
  • O365.SecurityAndCompliance.ContentSearch.SearchAction.TenantId — Security and compliance search action Tenant ID.

Commands used

o365-sc-get-search-action o365-sc-new-search-action

Flowchart

#error# Start Start Waiting for search action to complete - GenericPolling Waiting for search action... GenericPolling Search action completed. Search action completed. Search action - Preview - o365-sc-new-search-action Search action - Preview o365-sc-new-search-action Get preview results - o365-sc-get-search-action Get preview results o365-sc-get-search-action Search preview is not supported - Print Search preview is not sup... Print