How to run a Content Search with Microsoft Purview eDiscovery

MICROSOFT 365 REFERENCE GUIDE · NOT AN APP FEATURE · Fictional examples · Updated October 2026

Content Search in the current Purview experience

The term Content Search is still useful, but searches now sit within the newer Microsoft Purview eDiscovery experience. Search is not a normal user-level mailbox search and requires appropriate eDiscovery permissions and licensing.

Before searching

• Obtain documented authorisation and define the purpose of the search.
• Identify which locations and date ranges are reasonably necessary.
• Check your eDiscovery role-group membership and Microsoft licensing.
• Plan how search results will be reviewed, stored and shared.

Create and run an eDiscovery content search

1. Sign in to the Microsoft Purview portal using an authorised account.
2. Open eDiscovery and select an appropriate existing case or the Content Search area/case.
3. Choose Create a search and give it a meaningful case-specific name.
4. Add only the relevant mailboxes, users, groups, SharePoint sites or OneDrive locations as data sources.
5. Use the condition builder to add keywords, relevant people and an appropriate date range.
6. Run the query, then inspect statistics, samples and previews as permitted.
7. Refine and re-run the query if it returns irrelevant or incomplete-looking results.
8. If an export is justified, follow the approved evidence-handling and secure-export process.

Example search scope

For example, an authorised investigation may require messages concerning “Project Cedar” sent within a defined period between specific participants. Specify both the right sources and the date range; simply searching a phrase in every mailbox can expose unnecessary information.

Important limitations

Search results depend on the selected sources, indexing and the supported data types. A search that returns no hits does not prove the organisation holds no matching information. This procedure should be performed by authorised compliance or IT personnel.

Is Content Search a TenantPilot feature?

No. TenantPilot does not currently execute Microsoft Purview eDiscovery searches. This article is a free Microsoft 365 administration resource; use Microsoft Purview and your organisation’s approved investigation process for the actual search.