Forum Discussion
Question about eDiscovery syntax
What would the appropriate eDiscovery syntax be if I wanted to perform a search on a single Exchange mailbox, capturing all email interactions between the mailbox's owner (i.e. email address removed for privacy reasons) and an external email address (i.e. email address removed for privacy reasons)?
This is very easy. You select the mailbox under Exchange Mailboxes. Then in Define Search Conditions: Add Condition, Participants. Add the external as a participant. Either full email, or example.com, and ENTER. Enter, and do 2nd one, and Enter again to force it to accept that address.
This will show all emails from or to the external. Select Received date, etc as needed.
