XSOAR O365: All-mailboxes search *A Question from XSOAR O365 Webinar*

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements

XSOAR O365: All-mailboxes search *A Question from XSOAR O365 Webinar*

L5 Sessionator

Any updates planned regarding the time to search all mailboxes through the integration? In large orgs with 30k+ mailboxes, search can take over an hour to two hours to search all mailboxes, not practical at all and a viable solution. Same search within O365, via GUI or powershell takes just minutes.

 

This question was asked as part of our Cortex XSOAR Customer Success Webinar: XSAOR and O365 Integration 

 

1 accepted solution

Accepted Solutions

L5 Sessionator

A reply by: @jqamruddin & @amenendez 

The documentation here does provide the search times per mailboxes. https://learn.microsoft.com/en-us/purview/ediscovery-limits-for-content-search?view=o365-worldwide Taking the search times into account and even though the search might have been completed, on XSOAR side, we are waiting for the response from the Microsoft API. This is why we have a Generic Polling step which waits for that response to move on cause it can take longer in larger organizations.

View solution in original post

1 REPLY 1

L5 Sessionator

A reply by: @jqamruddin & @amenendez 

The documentation here does provide the search times per mailboxes. https://learn.microsoft.com/en-us/purview/ediscovery-limits-for-content-search?view=o365-worldwide Taking the search times into account and even though the search might have been completed, on XSOAR side, we are waiting for the response from the Microsoft API. This is why we have a Generic Polling step which waits for that response to move on cause it can take longer in larger organizations.

  • 1 accepted solution
  • 1102 Views
  • 1 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!