ediscoveryReviewSetQuery resource type

  • Article

Namespace: microsoft.graph.security

Represents a review set query, which is used to query and cull data stored in a Microsoft Purview eDiscovery reviewSet.

Methods

Method Return type Description
List microsoft.graph.security.ediscoveryReviewSetQuery collection Get a list of the ediscoveryReviewSetQuery objects and their properties.
Create microsoft.graph.security.ediscoveryReviewSetQuery Create a new ediscoveryReviewSetQuery object.
Get microsoft.graph.security.ediscoveryReviewSetQuery Read the properties and relationships of an ediscoveryReviewSetQuery object.
Update microsoft.graph.security.ediscoveryReviewSetQuery Update the properties of an ediscoveryReviewSetQuery object.
Delete None Delete an ediscoveryReviewSetQuery object.
Apply tags None Apply tags to documents that match the specified query.
Export None Export documents that match the specified query from a review set.

Properties

Property Type Description
contentQuery String The query string in KQL (Keyword Query Language) query. For details, see Document metadata fields in eDiscovery (Premium). This field maps directly to the keywords condition. You can refine searches by using fields listed in the searchable field name paired with values; for example, subject:"Quarterly Financials" AND Date>=06/01/2016 AND Date<=07/01/2016.
createdBy identitySet The user who created the query.
createdDateTime DateTimeOffset The time and date when the query was created. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z
description String The description of the eDiscovery search.
displayName String The name of the query.
id String The unique identifier of the query. Read-only.
lastModifiedBy identitySet The user who last modified the query.
lastModifiedDateTime DateTimeOffset The date and time the query was last modified. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z

Relationships

None.

JSON representation

The following is a JSON representation of the resource.

{
  "@odata.type": "#microsoft.graph.security.ediscoveryReviewSetQuery",
  "id": "String (identifier)",
  "displayName": "String",
  "description": "String",
  "createdBy": {
    "@odata.type": "microsoft.graph.identitySet"
  },
  "createdDateTime": "String (timestamp)",
  "lastModifiedBy": {
    "@odata.type": "microsoft.graph.identitySet"
  },
  "lastModifiedDateTime": "String (timestamp)",
  "contentQuery": "String"
}