Prepare data for Office 365 Advanced eDiscovery

This topic describes how to load the results of a Content Search in to a case in Advanced eDiscovery.


Advanced eDiscovery requires an Office 365 E3 with the Advanced Compliance add-on or an E5 subscription for your organization. If you don't have that plan and want to try Advanced eDiscovery, you can sign up for a trial of Office 365 Enterprise E5.

Step 1: Prepare Office 365 data for Advanced eDiscovery

To analyze data with Advanced eDiscovery, you can use the results of a Content Search that you run in the Microsoft 365 Security & Compliance Center (listed on the Content search page in the Microsoft 365 Security & Compliance Center) or a search associated with an eDiscovery case (listed on the eDiscovery page in the Security & Compliance Center).

For the detailed steps on preparing search results for analysis in Advanced eDiscovery, see Prepare search results for Office 365 Advanced eDiscovery.


If you have data outside of Office 365 and want to import it to Office 365 so that you can prepare and analyze it in Advanced eDiscovery, a see Overview of importing PST files to Office 365 and Archiving third-party data in Office 365.

Step 2: Load search result data in to a case in Advanced eDiscovery

After you prepare the search results in the Security & Compliance Center for analysis, the next step is to load the search results in to a case in Advanced eDiscovery. For more detailed information, see Run the Process module.

  1. Go to

  2. Sign in to Office 365 using your work or school account.

  3. In the Security & Compliance Center, click Search & investigation > eDiscovery to display the list of cases in your organization.

  4. Click Open next to the case that you want to load data in to in Advanced eDiscovery.

  5. On the Home page for the case, click Advanced eDiscovery.

    Click Switch to Advanced eDiscovery to open the case in Advanced eDiscovery

    The Connecting to Advanced eDiscovery progress bar is displayed. When you're connected to Advanced eDiscovery, a list of containers is displayed on the setup page for the case.

    The case is displayed in Advanced eDiscovery

    These containers represent the search results that you prepared for analysis in Advanced eDiscovery in Step 1. Note that the name of the container has the same name as the Content Search in the case in the Security & Compliance Center. The containers in the list are the ones that you prepared. If a different user prepared search results for Advanced eDiscovery, the corresponding containers won't be included in the list.

  6. To load the search result data from a container in to the case in Advanced eDiscovery, select a container and then click Process.

After the search results from the Security & Compliance Center are added to the case in Advanced eDiscovery, the next step is to use the tools in Advanced eDiscovery to analyze and cull the data that's relevant to the case.

See also

Office 365 Advanced eDiscovery

Set up users and cases

Analyzing case data

Managing Relevance setup

Using the Relevance module

Exporting case data