You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
title: Resolve search errors in eDiscovery (Standard)
2
+
title: Resolve Search Errors in eDiscovery (Standard)
3
3
description: Resolve common search errors in Microsoft Purview eDiscovery (Standard).
4
4
manager: dcscontentpm
5
5
audience: ITPro
@@ -17,24 +17,20 @@ search.appverid: MET150
17
17
ms.date: 05/05/2025
18
18
---
19
19
20
-
# Resolve search errors in eDiscovery (Standard)
20
+
# Resolve search errors in eDiscovery
21
21
22
-
If you encounter an issue or error that's related to searches in Microsoft Purview eDiscovery (Standard), retry the operation to rule out transient issues. For issues that persist, select the applicable description from the following list:
22
+
If you experience an issue or error that's related to searches in Microsoft Purview eDiscovery, retry the operation to rule out transient issues. For issues that persist, select the applicable description from the following list:
23
23
24
24
-[Search issue: Difference between estimated and downloaded search results](#search-issue-difference-between-estimated-and-downloaded-search-results)
25
25
-[Search error: "Location is ambiguous](#search-error-location-is-ambiguous)"
26
26
-[Search error: "Recipient not found](#search-error-recipient-not-found)"
27
27
-[Search error: CS007](#search-error-cs007)
28
28
-[Search error: "Internal server error (500)](#search-error-internal-server-error-500-occurred)"
29
29
-[Search or export error: "Maximum number of jobs for your organization are currently running](#search-or-export-error-maximum-number-of-jobs-for-your-organization-are-currently-running)"
30
-
-[Export issue: Export appears to be stalled](#export-issue-export-appears-to-be-stalled)
31
30
-[Export error: "Item has been moved or deleted" or "Unable to retrieve item due to timeout](#export-error-item-has-been-moved-or-deleted-or-unable-to-retrieve-item-due-to-timeout)"
32
-
-[Export error: "Request failed with status code 500" or "500 internal server error"](#export-error-request-failed-with-status-code-500-or-500-internal-server-error)
33
31
-[Export error: "File wasn't exported because it doesn't exist" or "File not found"](#export-error-file-wasnt-exported-because-it-doesnt-exist-or-file-not-found)
34
-
-[Export download issue: Slow download of exported search results](#export-download-issue-slow-download-of-exported-search-results)
35
-
-[Export download issue: eDiscovery export tool doesn't download any files](#export-download-issue-ediscovery-export-tool-doesnt-download-any-files)
32
+
-[Export download issue: eDiscovery export doesn't download any files](#export-download-issue-ediscovery-export-doesnt-download-any-files)
36
33
-[Export download error: "Search result was not downloaded as it is a folder"](#export-download-error-search-result-was-not-downloaded-as-it-is-a-folder)
37
-
-[Export download error: "Cannot access the file 'ExportData.db'"](#export-download-error-cannot-access-the-file-exportdatadb)
38
34
39
35
If none of these resolutions apply to your search issue, contact [Microsoft Support](https://go.microsoft.com/fwlink/?linkid=2189021). Depending on your issue, gather output by using the [Get-ComplianceSearch](/powershell/module/exchange/get-compliancesearch) or [Get-ComplianceSearchAction](/powershell/module/exchange/get-compliancesearchaction) PowerShell cmdlet before you create a support case. For information about other diagnostic information that Microsoft Support might need, see [Collect eDiscovery diagnostic information](/microsoft-365/compliance/ediscovery-diagnostic-info).
40
36
@@ -70,7 +66,7 @@ For each invalid location, follow these steps:
70
66
71
67
1.[Connect to Security & Compliance PowerShell](/powershell/exchange/connect-to-scc-powershell).
72
68
73
-
2. Find the duplicate or conflicting objects that use a mailbox identifier. To do this, run the following [Get-Recipient](/powershell/module/exchange/get-recipient) command:
69
+
2. Find the duplicate or conflicting objects that use a mailbox identifier. To search, run the following [Get-Recipient](/powershell/module/exchange/get-recipient) command:
74
70
75
71
```powershell
76
72
Get-Recipient -Identity "<mailbox identifier from error message>"
@@ -102,7 +98,7 @@ The system can't find one of the [recipients](/powershell/module/exchange/new-ma
102
98
103
99
3. If the command doesn't return a user object for a recipient, wait 30 minutes for synchronization to finish, and then recheck.
104
100
105
-
4. After you verify that the recipient has synced in EOP, retry your search.
101
+
4. After you verify that the recipient is synced in EOP, retry your search.
106
102
107
103
[Back to top](#resolve-search-errors-in-ediscovery-standard)
108
104
@@ -132,16 +128,8 @@ Your [eDiscovery search](/microsoft-365/compliance/ediscovery-search-for-content
132
128
133
129
### Cause
134
130
135
-
Issues that can cause this error include:
136
-
137
131
- A search query that returns too many results for the system to process. For example, a query that uses several wildcards can return a large result set.
138
132
139
-
- Other search errors. To check for those errors, run the following command to get information about the search, and then look for error messages in the output:
Retry your search. If your search still fails, split your search into smaller searches. For example, use date ranges or limit the number of search locations to return smaller result sets.
@@ -158,7 +146,7 @@ When you try to [search](/microsoft-365/compliance/ediscovery-search-for-content
158
146
159
147
### Cause
160
148
161
-
Your organization has reached the [maximum limit of 50 concurrent jobs](/microsoft-365/compliance/ediscovery-limits-for-content-search). Because export jobs typically take longer to finish than search jobs, export jobs are more likely to fill the quota.
149
+
Your organization reached the [maximum limit of 50 concurrent jobs](/microsoft-365/compliance/ediscovery-limits-for-content-search). Because export jobs typically take longer to finish than search jobs, export jobs are more likely to fill the quota.
162
150
163
151
### Resolution
164
152
@@ -201,25 +189,6 @@ To resolve the error, use the following procedure:
201
189
202
190
[Back to top](#resolve-search-errors-in-ediscovery-standard)
203
191
204
-
## Export issue: Export appears to be stalled
205
-
206
-
### Symptoms
207
-
208
-
You try to [export eDiscovery search results](/microsoft-365/compliance/ediscovery-export-content), but the export doesn't finish, and it appears to be stalled.
209
-
210
-
### Cause
211
-
212
-
Transient issues can stall the export process.
213
-
214
-
### Resolution
215
-
216
-
Restart the export.
217
-
218
-
> [!NOTE]
219
-
> You can't restart an export of search results that were generated more than seven days earlier. Instead, rerun the search, and then start the export.
220
-
221
-
[Back to top](#resolve-search-errors-in-ediscovery-standard)
222
-
223
192
## Export error: "Item has been moved or deleted" or "Unable to retrieve item due to timeout"
224
193
225
194
### Symptoms
@@ -240,80 +209,6 @@ Wait for the system to retrieve and export the original mailbox items that are a
240
209
241
210
[Back to top](#resolve-search-errors-in-ediscovery-standard)
242
211
243
-
## Export error: "Request failed with status code 500" or "500 internal server error"
244
-
245
-
### Symptoms
246
-
247
-
When you try to [export or download eDiscovery search results,](/microsoft-365/compliance/ediscovery-export-content) you receive one of the following error messages:
248
-
249
-
-> Request failed with status code 500
250
-
251
-
-> 500 internal server error
252
-
253
-
### Cause
254
-
255
-
The issue can occur for any of the following reasons.
256
-
257
-
#### Cause 1
258
-
259
-
You don't have the [Export role](/microsoft-365/compliance/ediscovery-assign-permissions#rbac-roles-related-to-ediscovery). The Export role is automatically assigned to members of the eDiscovery Manager role group. The Export role isn't automatically assigned to members of the Organization Management role group.
260
-
261
-
#### Cause 2
262
-
263
-
The error occurs when you try to download exported search results if you're not the admin who exported the search results.
264
-
265
-
#### Cause 3
266
-
267
-
[Permissions filters](/microsoft-365/compliance/ediscovery-permissions-filtering-for-content-search) for your user account restrict the mailboxes, storage locations, or content that you can search and export.
268
-
269
-
#### Cause 4
270
-
271
-
The amount of exportable data for your search exceeds 2 TB. The maximum amount of exportable data for a single search is 2 TB. To determine the exportable data size, run the following command:
Choose the resolution that corresponds to the applicable cause.
280
-
281
-
#### Resolution 1
282
-
283
-
If you're a member of the Organization Management role group, [add yourself to the eDiscovery Manager role group](/microsoft-365/compliance/ediscovery-assign-permissions#assign-ediscovery-permissions). You can do that on the [Permissions page](https://compliance.microsoft.com/compliancecenterpermissions) in the Microsoft Purview compliance portal, or by using the [Add-eDiscoveryCaseAdmin](/powershell/module/exchange/add-ediscoverycaseadmin) PowerShell cmdlet.
284
-
285
-
#### Resolution 2
286
-
287
-
Ask the admin who created the export to complete the download. To find that admin, run the following command:
For the mailboxes and storage locations that you want to search and export, check whether any [permissions filters](/microsoft-365/compliance/ediscovery-permissions-filtering-for-content-search) prevent those actions. If necessary, ask an admin to configure permissions filters.
296
-
297
-
#### Resolution 4
298
-
299
-
Reduce the download size by splitting your search into smaller searches. For example, use date ranges or limit the number of search locations to return smaller result sets.
300
-
301
-
To check whether the Search, Export, or Preview roles are assigned to the designated administrator account, run the following test in the Microsoft 365 admin center. You must have **Global** or **Compliance** administrator permissions to use the following steps.
302
-
303
-
> [!NOTE]
304
-
> This diagnostic isn't available for the GCC High or DoD environments, or for Microsoft 365 operated by 21Vianet.
305
-
306
-
1. In the Microsoft 365 admin center, select the **Run Tests: eDiscovery RBAC check** button to populate the associated test:
- A higher-than-usual load on the mailbox servers.
354
-
355
-
- Other download errors. To check for those errors:
356
-
357
-
- Run the following command to get information about an in-progress export. Look for error messages in the command output.
358
-
359
-
```powershell
360
-
Get-ComplianceSearchAction | FL Results
361
-
```
362
-
363
-
- Look for error messages in the *trace.log* file in the downloaded export folder.
364
-
365
-
### Resolution
366
-
367
-
To reduce the download size, split your search into smaller searches. For example, use date ranges or limit the number of search locations to return smaller result sets.
368
-
369
-
[Back to top](#resolve-search-errors-in-ediscovery-standard)
You run the eDiscovery export tool to [download eDiscovery search results](/microsoft-365/compliance/ediscovery-export-content). However, after the operation finishes, the **Estimated Total** field in the tool window shows that no files were downloaded.
236
+
You run the eDiscovery export to [download eDiscovery search results](/purview/edisc-search-export). However, after the operation finishes, the **Estimated Total** field in the tool window shows that no files were downloaded.
376
237
377
238
### Cause
378
239
379
240
The issue can occur for any of the following reasons:
380
241
381
-
- Antivirus software on the destination computer blocks the download.
382
-
383
-
- You select a download drive that isn't a local drive.
242
+
- Browser not configured to allow pop-ups.
384
243
385
-
- You select a destination folder that's either:
386
-
387
-
- The download folder of another eDiscovery export.
388
-
389
-
- The parent folder of the download folder of another eDiscovery export. Because the export tool saves metadata files in the parent folder, metadata files for different downloads can conflict with one another.
244
+
- Some Network endpoints are not allowed for downloads in your organization.
390
245
391
246
### Resolution
392
247
393
-
Try each of the following methods in the given order until the issue is resolved:
394
-
395
-
1. Pause the antivirus scanner on the destination computer, and then retry the download.
396
-
397
-
2. Download to a local drive. If necessary, download to a different client computer.
398
-
399
-
3. Select a destination folder that doesn't conflict with any concurrent eDiscovery export.
400
-
401
-
4. Disable export to a compressed folder, and disable deduplication of Exchange content. If this step resolves the issue, then the cause is probably antivirus software blocking the download or that you tried to download to a remote drive.
248
+
If you're experiencing issues that affect the download, see [Best practices for downloading export packages](/purview/edisc-search-export).
402
249
403
250
[Back to top](#resolve-search-errors-in-ediscovery-standard)
404
251
@@ -419,39 +266,3 @@ You might see this error message if your search includes Microsoft SharePoint On
419
266
No resolution is required. You can safely ignore the error message.
420
267
421
268
[Back to top](#resolve-search-errors-in-ediscovery-standard)
422
-
423
-
## Export download error: "Cannot access the file 'ExportData.db'"
424
-
425
-
### Symptoms
426
-
427
-
You run the eDiscovery export tool to [download eDiscovery search results](/microsoft-365/compliance/ediscovery-export-content), but the download gets stuck or produces zero-byte files. You see the following error message in the *trace.log* file in the downloaded export folder:
428
-
429
-
> Hit tolerable error, will retry: The process cannot access the file 'ExportData.db' because it is being used by another process.
430
-
431
-
### Cause
432
-
433
-
The issue can occur if:
434
-
435
-
- Antivirus software on the destination computer blocks the download.
436
-
437
-
- You select a download drive that isn't a local drive.
438
-
439
-
- You select a destination folder that's either:
440
-
441
-
- The download folder of another eDiscovery export.
442
-
443
-
- The parent folder of the download folder of another eDiscovery export. Because the export tool saves metadata files in the parent folder, metadata files for different downloads can conflict.
444
-
445
-
### Resolution
446
-
447
-
Try each of the following methods in the given order until the error is resolved:
448
-
449
-
1. Pause the antivirus scanner on the destination computer, and then retry the download.
450
-
451
-
2. Download to a local drive. If necessary, download to a different client computer.
452
-
453
-
3. Select a destination folder that doesn't conflict with any concurrent eDiscovery export.
454
-
455
-
4. Disable export to a compressed folder, and disable deduplication of Exchange content. If this step resolves the issue, then the cause is probably antivirus software blocking the download or that you tried to download to a remote drive.
456
-
457
-
[Back to top](#resolve-search-errors-in-ediscovery-standard)
0 commit comments