I need to provide HR with approximately eight months of Microsoft Teams chat history between User A and User B. My current query is `Kind=microsoftteams AND participants:[email protected] AND participants:[email protected]`, but it returns group chats and other conversations where both people participated. I only need messages exchanged directly between these two users. Is there a better query or filtering method in Purview?
3 Answers
Try filtering by the sender and recipient in both directions, rather than only requiring both users to appear as participants: `Kind=microsoftteams AND ((from:[email protected] AND to:[email protected]) OR (from:[email protected] AND to:[email protected]))`. If the `to` field is not supported in your search interface, use `participants` in its place, though that may still include additional conversations.
Another approach is to add the search results to a review set and filter by participant count. Setting the participant count to 1 can isolate one-on-one chats and exclude group conversations. The exact filter name may vary slightly depending on the Purview workflow and licensing.
The available search and export features can depend heavily on your Microsoft 365 licensing. With standard licensing, Teams exports can be limited and the resulting format may be difficult to work with, so check which eDiscovery and review-set capabilities are included before relying on a particular workflow.
Related Questions
Can't Load PhpMyadmin On After Server Update
Redirect www to non-www in Apache Conf
How To Check If Your SSL Cert Is SHA 1
Windows TrackPad Gestures