Sharepoint 2013 : Identifying and holding content

One of the first steps for any legal or regulatory action is to ensure that data is not changed or deleted during an investigation. Within SharePoint 2013, eDiscovery Sets are used to identify content that matches search constraints and rapidly enforce a hold on that content. After the hold is put in place, you have time to explore and export relevant data during the course of the investigation.

Create a hold on a case

1. Navigate to the Home page of your case. In the Identify And Hold section, click New Item.

   

   Tip

   If you create an eDiscovery set without specifying any filter information, all content on the site will be subjected to an in-place hold.

   Tip

   A case can contain multiple eDiscovery Sets, so you can choose any number of search expressions and continue to add new holds during an investigation.

2. On the New: eDiscovery Set page, enter a name for the set.

3. Click the Add & Manage Sources link.

4. On the Add & Manage Sources page, in the Locations section, enter one or more URLs to SharePoint sites that you want to add to the hold operation.

5. Click the Check icon next to each URL to validate the address.

6. Click OK to return to the New: eDiscovery Set page.

   

7. Enter your search constraints. If you leave these values blank, the entire contents of each site will be placed under the hold.

8. Select Enable In-Place Hold.

9. Click Save to trigger the hold operation.

   

Try This

You can click the Preview Results button to view representative files that will be placed under the hold prior to implementing the hold operation.