Share via

Analyze data in a review set in eDiscovery (preview)

  • Article

When the number of collected documents is large, it can be difficult to review them all. eDiscovery (preview) provides tools to analyze the documents to reduce the volume of documents to be reviewed without any loss in information, and to help you organize the documents in a coherent manner. To learn more about these capabilities, see:

Tip

Get started with Microsoft Security Copilot to explore new ways to work smarter and faster using the power of AI. Learn more about Microsoft Security Copilot in Microsoft Purview.

Run analytics for a review set

To analyze data in a review set, complete the following steps:

  1. Go to the Microsoft Purview portal and sign in using the credentials for a user account assigned eDiscovery permissions.
  2. Select the eDiscovery solution card and then select Cases (preview) in the left nav.
  3. Select a case, the select Case settings.
  4. On the Case settings page, select Search & analytics.
  5. The case Search & analytics page is displayed. Configure analytics settings for your case. For more information, see Learn about search and analytics settings in eDiscovery (preview) cases.
  6. After selecting the applicable search and analytics options, select Save.
  7. Close the Case settings page, then select the Review sets tab.
  8. Select the review set that you want to export and select Open review set.
  9. Select Analytics > Run document & email analytics.
  10. A notification dialog is displayed about the time it takes to complete the analytics process. Select Yes to continue with running the analytics process or select Cancel.
  11. Select OK when notified that the analyze process is created.

You can check the progress of the analysis process by selecting Process manager in the review set. The process type is Run analytics.

After the analysis process is completed, you can view the analytics report, run queries within your review set on outputs of the analysis, and see related documents of a given document.

Using the For Review (preview) filter query

After running analytics for the review set, you can use an automatically generated filter query (called For Review) that filters your review to exclude immaterial, duplicate, or noninclusive items. This leaves you with only the items that are representative, unique, and inclusive in the review set.

To apply the For Review - Unique items only (preview) filter query to a review set, select the Saved filter queries dropdown list, and then select [AutoGen] For Review - Unique items only (preview). Minimize the query details to view the results.

Here's the syntax for the For Review - Unique items only (preview) filter query:

(((FileClass="Email") AND (InclusiveType="InclusiveMinus" OR InclusiveType="Inclusive")) OR ((FileClass="Attachment") AND (UniqueInEmailSet="true")) OR ((FileClass="Document") AND (MarkAsRepresentative="Unique")) OR (FileClass="Conversations"))

The following list describes the result of the filter query in terms of what content is displayed after you apply it to the review set.

  • Email: Displays items that are marked as Inclusive or InclusiveMinus. An inclusive item is the final message in an email thread. It contains all previous content in the email thread. An inclusive minus it contains one or more attachments associated with the specific message in the email thread. A reviewer can use the inclusive minus value to determine which specific messages in the email thread have associated attachments.
  • Attachments: Filters out duplicate attachments in the same Email Set. Only attachments that are unique in an email thread are displayed.
  • Documents and other: Filters out duplicate documents. Only documents that are unique in the review set are displayed.
  • Teams conversations: All Teams (and Viva Engage) conversations in the review set are displayed.

For more information about inclusive types and document uniqueness, see Email threading in eDiscovery).

Using the Potentially Immaterial Items filter query

After running analytics for the review set, you can use an automatically generated filter query (called Potentially Immaterial Items) that filters your review to exclude immaterial items. This leaves you with only the items that are representative and inclusive in the review set.

To apply the Potentially Immaterial Items filter query to a review set, select the Saved filter queries dropdown list, and then select [AutoGen] Potentially Immaterial Items. Minimize the query details to view the results.

Analytics report

To view the analytics report for a review set, complete the following steps:

  1. Go to the Microsoft Purview portal and sign in using the credentials for a user account assigned eDiscovery permissions.
  2. Select the eDiscovery solution card and then select Cases (preview) in the left nav.
  3. Select a case, then select the Review sets tab.
  4. Select a review set, select Open review set.
  5. Select Analytics > Show reports.

The Analytics report has seven components from the analysis. Hover over the results to view counts for each component:

  • Target population: The number of email messages, attachments, and loose documents found in the review set.
  • Documents (excluding attachments): The number of loose documents that are pivots, unique near duplicates of a pivot, or an exact duplicate of another document.
  • Emails: The number of email messages that are marked as inclusive, inclusive copy, inclusive minus, or none of the above.
  • Attachments: The number of email attachments that are unique or duplicates of another email attachment in the review set.
  • Number documents by file type: The number of files, identified by file extension.
  • Documents by source: A summary of content by its original data source.
  • Documents aggregated by process: A summary of content by review set processes.