topic Re: XSOAR O365: All-mailboxes search A Question from XSOAR O365 Webinar in Cortex XSOAR Discussions

XSOAR O365: All-mailboxes search A Question from XSOAR O365 Webinar

rtsedaka — Thu, 19 Oct 2023 18:44:35 GMT

Any updates planned regarding the time to search all mailboxes through the integration? In large orgs with 30k+ mailboxes, search can take over an hour to two hours to search all mailboxes, not practical at all and a viable solution. Same search within O365, via GUI or powershell takes just minutes.

This question was asked as part of our Cortex XSOAR Customer Success Webinar: XSAOR and O365 Integration

Re: XSOAR O365: All-mailboxes search A Question from XSOAR O365 Webinar

rtsedaka — Thu, 19 Oct 2023 18:45:54 GMT

A reply by: @jqamruddin & @amenendez

The documentation here does provide the search times per mailboxes. https://learn.microsoft.com/en-us/purview/ediscovery-limits-for-content-search?view=o365-worldwide Taking the search times into account and even though the search might have been completed, on XSOAR side, we are waiting for the response from the Microsoft API. This is why we have a Generic Polling step which waits for that response to move on cause it can take longer in larger organizations.

topic Re: XSOAR O365: All-mailboxes search *A Question from XSOAR O365 Webinar* in Cortex XSOAR Discussions

XSOAR O365: All-mailboxes search *A Question from XSOAR O365 Webinar*

Re: XSOAR O365: All-mailboxes search *A Question from XSOAR O365 Webinar*

topic Re: XSOAR O365: All-mailboxes search A Question from XSOAR O365 Webinar in Cortex XSOAR Discussions

XSOAR O365: All-mailboxes search A Question from XSOAR O365 Webinar

Re: XSOAR O365: All-mailboxes search A Question from XSOAR O365 Webinar