SAR eDiscovery Syntax to Exclude

[gpjt]

Can anyone offer some help on what the syntax would be for e Discovery search within o365 that would exlcude any emails sent to an individuals mailbox. I want to take out the person who has requested it because they already have access to that content.

[psydii]

filter the result set

[gpjt]

Sorry I don't quite understand what you mean by the result set? Do you mean after the export of the data?

 

Current syntax is:

"searchtext" NOT Recipients="emailaddress" AND "emailaddress"

Edited January 9, 2025 by gpjt

[psydii]

Sorry I miss remembered the name should have said "Review Set"

 

https://learn.microsoft.com/en-us/purview/ediscovery-analyzing-data-in-review-set

 

Use the condition builder, and the "none of" condition.

[gpjt]

Think they are premium features that we don't have and are doing it as a standard case.