This topic describes the setup of Office 365 data for analysis with Advanced eDiscovery.
Note: If you have data outside of Office 365 and want to prepare and run non-Office 365 data against it, see Import PST files or SharePoint data to Office 365.
Prepare Office 365 data for Advanced eDiscovery
For analysis with Advanced eDiscovery, you can use the results of a compliance search (listed on the Content search page in the Office 365 Security & Compliance Center) or a search associated with an eDiscovery case (listed on the eDiscovery page in the Office 365 Security & Compliance Center).
For the detailed steps on preparing data for analysis in Advanced eDiscovery, see Prepare search results for Office 365 Advanced eDiscovery.
Running the Process module to start the Advanced eDiscovery analysis
The following is a high-level description of the steps in the Process module to select and start analysis of the prepared data. For full details, see Running the Process module.
In Office 365 > Security & Compliance > Search & investigation > eDiscovery, open Advanced eDiscovery by clicking Go to Advanced eDiscovery.
On the Cases page in Advanced eDiscovery, click the case you want to use, and then click Go to case.
On the Process page, under Container, click the item that corresponds to the search results that you prepared. Note the titles in the list are the names of searches from the Security & Compliance Center.
Click Process to add the selected search results to the case.
You can view the Process results for successfully processed files, and those that returned errors, in Prepare > Results > Process summary.
Review and assign a custodian to the data source in Prepare > Custodians > Assign. If necessary, you can manage custodians in Prepare > Custodians > Manage.
After the search results from the Security & Compliance Center are added to a case, the next step is to use the tools in Advanced eDiscovery to analyze and cull the data that's relevant to the case.