Forum Discussion

dunnep26's avatar
dunnep26
Copper Contributor
Sep 21, 2020
Solved

e-discovery search based on meeting appointment start time?

Hi all,

 

I am currently working on an ediscovery case, which requires me to search a particular user mailbox for calendar entries.

 

What I would like to achieve is an export of the mailbox calendar appointments (kind:meeting) based on the actual date of the appointment (i.e. the Start Time), rather than the date on which the appointment was send/received, however going from docs articles, it does not look like this is possible (https://docs.microsoft.com/en-us/microsoft-365/compliance/keyword-queries-and-search-conditions?view=o365-worldwide), which seems like a rather irritating limitation of the O365 SCC.

 

Is anyone aware of how I could achieve my goal?

  • I dont think it's possible with the KQL syntax, sorry. What you can do is get all the meeting items, than use some script/code to fetch the relevant MAPI properties out of each item and filter by it.

  • I dont think it's possible with the KQL syntax, sorry. What you can do is get all the meeting items, than use some script/code to fetch the relevant MAPI properties out of each item and filter by it.

    • WWeDiscovery's avatar
      WWeDiscovery
      Copper Contributor

      VasilMichev I see this was a response in 2020.  Have there been any improvements here.  Like the original requestor, investigations tend to inquire what meetings were scheduled for the custodian on x date vs when the invitation was accepted or declined.  Thanks for any updates you could offer if any.  

    • dunnep26's avatar
      dunnep26
      Copper Contributor

      Thanks VasilMichev , I appreciate you taking the time to reply. I will look into doing this another way.

Resources