I need to provide HR with roughly eight months of Microsoft Teams chat history between User A and User B. My current search is `Kind:microsoftteams AND participants:[email protected] AND participants:[email protected]`, but it returns group chats and other conversations where both people participated. I only want their one-to-one conversation. Is there a better Purview query or filtering method?
2 Answers
Try filtering by the sender and recipient in both directions instead of requiring both people to appear only as participants: `Kind:microsoftteams AND ((from:[email protected] AND to:[email protected]) OR (from:[email protected] AND to:[email protected]))`. If `to:` is not supported in your search configuration, use `participants:` in the same structure, though that may still include some group-chat results.
The exact options available can depend heavily on your Purview licensing. With standard licensing, Teams exports can be fairly limited and awkward to format, so check which eDiscovery and review-set features your tenant actually includes before relying on a particular filter.
We only have the standard licensing, so that may explain some of the limitations. I’ll try the sender/recipient query and the participant-count filter.