eDiscovery - Content Search - KQL Editor - Property Restrictions

Question

Is there a listing of all the Property Restrictions available for use in the KQL editor? I know it provides example and suggestions; however, a complete listing would be helpful. I have looked in various places with no results.

Answer 1

Hi @PA4055

Thank you for posting your query!

When you start to enter a search query in the KQL editor, the editor displays suggested autocompletion of supported search properties (also called property restrictions) that you can select. You have to type a minimum of two characters to display a list of supported properties that begin with those two characters.

The below documentation provides detailed information on the supported property restrictions and how to use them effectively in your queries. This includes properties for searching across email, chat, documents, and files stored in Exchange Online, SharePoint, and OneDrive for Business.

For more information you can refer below articles:
https://learn.microsoft.com/en-us/purview/ediscovery-kql-editor
https://learn.microsoft.com/en-us/purview/ediscovery-keyword-queries-and-search-conditions

Hope this helps. Do let us know if you any further queries.

---

If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.