Export report fields in Office 365 Advanced eDiscovery

Note

Advanced eDiscovery requires an Office 365 E3 with the Advanced Compliance add-on or an E5 subscription for your organization. If you don't have that plan and want to try Advanced eDiscovery, you can sign up for a trial of Office 365 Enterprise E5.

This topic describes the Advanced eDiscovery Export report fields for the Standard and All templates.

Export report fields

The following table lists the fields for each export template.

Export field name Group Description Available in Standard template Available in All template
Row_number
General
Row number.
Yes
Yes
File_ID
General
File ID.
Yes
Yes
File_class
Processing
File class.
Yes
Yes
Family_ID
Processing
Numeric identifier that is used to group files (usually email instance and its attachments).
Yes
Yes
For_review
Processing
Flag to indicate that the field will be included in export for review.
Yes
Yes
Native_file_name
Processing
Native file name, without referencing folder and extension.
Yes
Yes
Custodians
General
Custodian of the file.
Yes
Yes
Set_ID
Analyze
"ND set" or "Email set" id.
Yes
Yes
Inclusive_type
Email
Indicates if file is inclusive, according to the following values: 0 - not inclusive, 1 - Inclusive, 2 - Inclusive minus, 3 - Inclusive copy.
Yes
Yes
Marked_as_pivot
Near duplicates
Indicates if the file is a pivot.
Yes
Yes
Similarity_percent
Near duplicates
Percentage of similarity relative to the pivot.
Yes
Yes
Duplicate_subset
Near duplicates
Unique identifier of the duplicate subset. Indicates whether the file has exact text duplicates.
Yes
Yes
Date
General
Date of file (depends on file type - email: date sent; document: date modified).
Yes
Yes
Dominant_theme
Analyze
Primary Theme of the file.
Yes
Yes
Themes_list
Themes
List of Theme names.
Yes
Yes
ND_set
EquiSet
Unique numeric identifier of a Nearduplicate set.
Yes
Yes
Email_set
Email
Unique numeric identifier of an Email set.
Yes
Yes
Email_thread
Email
Describes the position of the email within the Email set Consists of all Node IDs from the root to the current email, separated by periods.
Yes
Yes
Email_subject
Email
Subject of the email.
Yes
Yes
Email_date_sent
Email
Date on which the email was sent.
Yes
Yes
Email_participants
Email
Email addresses of all participants in an email thread, including for missing links.
Yes
Yes
Email_participant_domains
Email
Domains of all participants in an email thread, including for missing link.
Yes
Yes
Email_sender
Email
Email sender name and/or address.
Yes
Yes
Email_sender_domain
Email
Email sender's domain.
Yes
Yes
Email_to
Email
To recipient of the email.
Yes
Yes
Email_cc
Email
CC recipient of the email.
Yes
Yes
Email_bcc
Email
BCC recipient of the email.
Yes
Yes
Email_recipient_domains
Email
Email recipients domains (To, CC, and BCC).
Yes
Yes
Email_date_received
Email
Date on which email was received.
Yes
Yes
Email_action
Email
Values: according to Email Subject: "Forward" (for "FW:"), "Reply" (for "RE:") or "Other" (other Subject text).
Yes
Yes
Meeting_Start_Date/Time
The date and time at which a meeting item started.
Yes
Yes
Meeting_End_Date/Time
The date and time at which a meeting item ended.
Yes
Yes
File_relevance_score
Relevance
Relevance score (0-100). Per issue.
Yes
Yes
Family_relevance_score
Relevance
Max family Relevance score (0-100). Per issue.
Yes
Yes
Relevance_tag
Relevance
Tagging of the file, if the file was manually tagged in Relevance. Per issue.
Yes
Yes
Relevance_load_group
Relevance
Relevance Load group, of the specified file, with a field per issue.
Yes
Yes
Normalized_relevance_score
Relevance
Normalized Relevance score (0-100), which is comparable between issues and loads.
Yes
Yes
Marked_as_seed
Relevance
Tagging of the file, if it was set to be as a seed file in Relevance Per issue/category.
Yes
Yes
Marked_as_pre-tagged
Relevance
Tagging of the file, if it was set as pre-tagged in Relevance Per issue/category.
Yes
Yes
Relevance_status_description
Relevance
Description of the relevance status.
Yes
Yes
Comment
General
Comment entered by the user.
Yes
Yes
Export_input_path
Processing
Export input path.
Yes
Yes
Pivot_ID
Near Duplicates
Pivot ID of the file.
Yes
Yes
Family_size
Processing
Number of files in a family.
Yes
Yes
Native_type
Processing
Native file type. For example, spreadsheet or presentation.
Yes
Yes
Native_MD5
Processing
MD5 hash value of the native file.
Yes
Yes
Native_size
Processing
Native file size.
Yes
Yes
Native_extension
Processing
Native file extension.
Yes
Yes
Doc_date_modified
Document Properties
Date native file was modified, taken from the file's metadata.
Yes
Yes
Doc_date_created
Document Properties
Date native file was created, taken from the file's metadata.
Yes
Yes
Doc_modified_by
Document Properties
User who modified native file, taken from the file's metadata.
Yes
Yes
O365_date_modified
Document Properties
Date native file was modified, taken from the either SharePoint or Exchange fields.
Yes
Yes
O365_date_created
Document Properties
Date native file was created, taken from either SharePoint or Exchange fields.
Yes
Yes
O365_modified_by
Document Properties
User who last modified native file, taken from either SharePoint or Exchange fields.
Yes
Yes
Compound_path
Processing
Native file path including its compound source.
Yes
Yes
Input_path
Processing
Path of the input file.
Yes
Yes
Input_date_modified
Processing
Date Input file was last modified.
Yes
Yes
ND_ET_sort_excl_attach
Analyze
Concatenation of Email set and ND set for review. 'D' is added as a prefix to ND sets, and 'E' is added to Email ssets.
Yes
Yes
ND_ET_sort_incl_attach
Analyze
Concatenation of Email set and ND set for review 'D' is added as a prefix to ND sets, and 'E' is added to Email sets. In addition, each email within an Email_set is followed by its appropriate attachments.
Yes
Yes
Deduped_custodians
General
Custodians of de-duped files
Yes
Yes
Deduped_file_IDs
General
IDs of de-duped files
Yes
Yes
Deduped_paths
General
Paths of de-duped files
Yes
Yes
File_key
General
Internal identifier for future use.
Yes
Yes
Export_native_path
Processing
Path of the native file in the export package.
Yes
Yes
Extracted_text_path
Processing
Path of the extracted file.
Yes
Yes
Process_batch
Processing
Batch identifier for Import batch.
Yes
Yes
Process_status_ID
Processing
Identifier representing Process stage status.
Yes
Yes
Process_status_description
Processing
Process stage status description: successful or error description.
Yes
Yes
Export_status_ID
Processing
ID of the export status.
Yes
Yes
Export_status_description
Processing
Description of the export status; successful or error description.
Yes
Yes
Read_percent
Relevance
Read % (0-100). Per issue.
Yes
Yes
Doc_author
Document properties
Document properties: author.
No
Yes
Doc_comments
Document properties
Document properties: comments.
No
Yes
Doc_keywords
Document properties
Document properties: keywords.
No
Yes
Doc_last_saved_by
Document properties
Document properties: last saved by.
No
Yes
Doc_revision
Document properties
Document properties: revision number.
No
Yes
Doc_subject
Document properties
Document properties: subject.
No
Yes
Doc_template
Document properties
Document properties: template.
No
Yes
Doc_title
Document properties
Document properties: title.
No
Yes
Email_has_attachment
Email
Indicates if the email has one or more attachments.
No
Yes
Email_importance
Email
Email importance property.
No
Yes
Email_level
Email
Indicates email's level within the email thread. For attachments, the value of the attached email.
No
Yes
Email_recipients
Email
Email recipients name and/or addresses (To, CC, and BCC).
No
Yes
Email_security
Email
Email security property.
No
Yes
Email_sensitivity
Email
Email sensitivity property.
No
Yes
Export_batch
Processing
File's last Export batch name.
No
Yes
Export_session
Processing
File's last Export session Id including date.
No
Yes
Extracted_text_length
Processing
Character length of the Extracted text file.
No
Yes
Family_duplicate_set
Processing
Numeric Identifier for families that are exact text duplicates of each other (respectively - all members of the families are exact duplicates).
No
Yes
Has_Text
Processing
Indicates if there is a text in the file: 0 - no ; 1- yes.
No
Yes
Input_file_ID
Processing
ID of the Input file from which file was extracted from.
No
Yes
Native_SHA_256
Processing
SHA-256 hash value of the native file.
No
Yes
O365_authors
Document properties
Users who modified native file, taken from either SharePoint or Exchange fields.
No
Yes
O365_created_by
Document properties
User who created native file, taken from either SharePoint or Exchange fields.
No
Yes
Parent_node
Email
Relates a node in an email thread to the closest parent node that is not a missing link.
No
Yes
Set_order_inclusives_first
Email
Emails and attachments: counter chronological order (Inclusives first). Documents: pivots first and the rest by similarity score, descending.
No
Yes
Tagged_By
Relevance
User who tagged the file in Relevance for the specific issue.
No
Yes
Word_count
Analyze
Number of words in the document.
No
Yes

Office 365 Advanced eDiscovery

Exporting case data with Advanced eDiscovery

Exporting results

Viewing batch history and exporting past results