1. Home
  2. Training Library
  3. Microsoft 365
  4. Microsoft 365 Courses
  5. Auditing and eDiscovery in Microsoft 365

Introduction to Content Search

Introduction to Content Search

This course explores how to implement and manage auditing and eDiscovery in Microsoft 365. We'll start by covering Content Search and other search and investigation tools that are used to perform content searches, and how to export content search results.

You'll also learn about auditing management, before moving on to Core eDiscovery and how to search content using the Security & Compliance Admin Center. You’ll also learn how to configure Core eDiscovery and how to create cases. Finally, we'll cover Advanced eDiscovery, and you’ll learn what Advanced eDiscovery is, how to set it up, and how to create and manage Advanced eDiscovery cases.

Learning Objectives

  • Learn about Content Search and other search and investigation tools that are used to perform content searches
  • Export Content Search results
  • Learn how to configure audit log retention and audit policy
  • Learn what Core eDiscovery is and how to search content using the Security & Compliance Admin Center
  • Configure Core eDiscovery and how to create cases
  • Get an overview of Advanced eDiscovery and learn how to create and manage Advanced eDiscovery cases

Intended Audience

This course is intended for those who wish to learn how to use and manage auditing and eDiscovery in Microsoft 365.


To get the most out of this course, you should already have some basic experience of working with Microsoft 365.


Hello and welcome to Content Search. In this lesson, we are going to take a high-level look at Content Search and at what permissions are necessary to use it.

Content Search is available in the compliance center in Office 365 and Microsoft 365. It’s used to perform searches for things like emails, documents, and instant messaging conversations. A real-world example of a Content Search use case is a scenario that I’ve used many times throughout my career. As part of an MSP, I was called upon numerous times to find out if a specific email was received by users within the organization. The Content Search tool makes this task quite easy. As a matter of fact, you can use Content Search to search Exchange Online mailboxes, SharePoint Online sites, OneDrive for Business accounts, Microsoft Teams conversations, Microsoft 365 Groups, Yammer Groups, and Skype for Business conversations.

When you perform a Content search, Microsoft 365 returns the number of content locations that hold the data you are searching for, along with an estimated number of search results. These statistics allow you to easily identify which locations are likely to hold what exactly you are looking for.

Once the search completes, you can preview the results and even export them to your computer for review.

However, before you can use Content Search, you must be a member of the eDiscovery Manager role group in the Security & Compliance Center.

In the next few lessons, we’ll get more into the details of Content Search and some other search and investigation tools.

About the Author
Learning Paths

Tom is a 25+ year veteran of the IT industry, having worked in environments as large as 40k seats and as small as 50 seats. Throughout the course of a long an interesting career, he has built an in-depth skillset that spans numerous IT disciplines. Tom has designed and architected small, large, and global IT solutions.

In addition to the Cloud Platform and Infrastructure MCSE certification, Tom also carries several other Microsoft certifications. His ability to see things from a strategic perspective allows Tom to architect solutions that closely align with business needs.

In his spare time, Tom enjoys camping, fishing, and playing poker.