This topic describes the set up of Office 365 data for analysis with Advanced eDiscovery.
Note: Advanced eDiscovery requires an Office 365 E5 subscription for your organization. If you don't have that plan and want to try Advanced eDiscovery, you can sign up for a trial of Office 365 Enterprise E5.
Prepare Office 365 data for Advanced eDiscovery
For analysis with Advanced eDiscovery, you can use the results of a compliance search (listed on the Content search page in the Office 365 Security & Compliance Center) or a search associated with an eDiscovery case (listed on the eDiscovery page in the Office 365 Security & Compliance Center).
For the detailed steps on preparing data for analysis in Advanced eDiscovery, see Prepare search results for Office 365 Advanced eDiscovery.
Note: If you have data outside of Office 365 and want to prepare and run non-Office 365 data against it, see Import PST files or SharePoint data to Office 365.
Run the Process module to start the Advanced eDiscovery analysis
The following is a high-level description of the steps in the Process module to select and start analysis of the prepared data. Full details are in the Run the Process module topic.
In the Office 365 Security & Compliance center, go to Search & investigation > eDiscovery, click Go to Advanced eDiscovery and open Advanced eDiscovery .
On the Cases page, select the case you want to use, and click Go to case.
On the Process page, in the Container section, click the item that corresponds to the search results that you prepared. Note the titles in the list are the names of searches from the Security & Compliance Center.
Click Process to add the selected search results to the case.
You can view the Process results for successfully processed files, and those that returned errors, in Prepare > Results > Process summary.
Review and assign a custodian to the data source in Prepare > Custodians > Assign. If necessary, you can manage custodians in Prepare > Custodians > Manage.
After the search results from the Security & Compliance Center are added to a case, the next step is to use the tools in Advanced eDiscovery to analyze and cull the data that's relevant to the case.