Skip to content

Commit 77fa9cf

Browse files
AB#6706: Update resolve-ediscovery-issues.md (#9295)
* Learn Editor: Update resolve-ediscovery-issues.md * Learn Editor: Update resolve-ediscovery-issues.md * Update resolve-ediscovery-issues.md Edit review per CI 6706 * Update resolve-ediscovery-issues.md --------- Co-authored-by: Jerry Sitser <[email protected]>
1 parent c5b3e93 commit 77fa9cf

File tree

1 file changed

+12
-201
lines changed

1 file changed

+12
-201
lines changed
Lines changed: 12 additions & 201 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
---
2-
title: Resolve search errors in eDiscovery (Standard)
2+
title: Resolve Search Errors in eDiscovery (Standard)
33
description: Resolve common search errors in Microsoft Purview eDiscovery (Standard).
44
manager: dcscontentpm
55
audience: ITPro
@@ -17,24 +17,20 @@ search.appverid: MET150
1717
ms.date: 05/05/2025
1818
---
1919

20-
# Resolve search errors in eDiscovery (Standard)
20+
# Resolve search errors in eDiscovery
2121

22-
If you encounter an issue or error that's related to searches in Microsoft Purview eDiscovery (Standard), retry the operation to rule out transient issues. For issues that persist, select the applicable description from the following list:
22+
If you experience an issue or error that's related to searches in Microsoft Purview eDiscovery, retry the operation to rule out transient issues. For issues that persist, select the applicable description from the following list:
2323

2424
- [Search issue: Difference between estimated and downloaded search results](#search-issue-difference-between-estimated-and-downloaded-search-results)
2525
- [Search error: "Location is ambiguous](#search-error-location-is-ambiguous)"
2626
- [Search error: "Recipient not found](#search-error-recipient-not-found)"
2727
- [Search error: CS007](#search-error-cs007)
2828
- [Search error: "Internal server error (500)](#search-error-internal-server-error-500-occurred)"
2929
- [Search or export error: "Maximum number of jobs for your organization are currently running](#search-or-export-error-maximum-number-of-jobs-for-your-organization-are-currently-running)"
30-
- [Export issue: Export appears to be stalled](#export-issue-export-appears-to-be-stalled)
3130
- [Export error: "Item has been moved or deleted" or "Unable to retrieve item due to timeout](#export-error-item-has-been-moved-or-deleted-or-unable-to-retrieve-item-due-to-timeout)"
32-
- [Export error: "Request failed with status code 500" or "500 internal server error"](#export-error-request-failed-with-status-code-500-or-500-internal-server-error)
3331
- [Export error: "File wasn't exported because it doesn't exist" or "File not found"](#export-error-file-wasnt-exported-because-it-doesnt-exist-or-file-not-found)
34-
- [Export download issue: Slow download of exported search results](#export-download-issue-slow-download-of-exported-search-results)
35-
- [Export download issue: eDiscovery export tool doesn't download any files](#export-download-issue-ediscovery-export-tool-doesnt-download-any-files)
32+
- [Export download issue: eDiscovery export doesn't download any files](#export-download-issue-ediscovery-export-doesnt-download-any-files)
3633
- [Export download error: "Search result was not downloaded as it is a folder"](#export-download-error-search-result-was-not-downloaded-as-it-is-a-folder)
37-
- [Export download error: "Cannot access the file 'ExportData.db'"](#export-download-error-cannot-access-the-file-exportdatadb)
3834

3935
If none of these resolutions apply to your search issue, contact [Microsoft Support](https://go.microsoft.com/fwlink/?linkid=2189021). Depending on your issue, gather output by using the [Get-ComplianceSearch](/powershell/module/exchange/get-compliancesearch) or [Get-ComplianceSearchAction](/powershell/module/exchange/get-compliancesearchaction) PowerShell cmdlet before you create a support case. For information about other diagnostic information that Microsoft Support might need, see [Collect eDiscovery diagnostic information](/microsoft-365/compliance/ediscovery-diagnostic-info).
4036

@@ -70,7 +66,7 @@ For each invalid location, follow these steps:
7066

7167
1. [Connect to Security & Compliance PowerShell](/powershell/exchange/connect-to-scc-powershell).
7268

73-
2. Find the duplicate or conflicting objects that use a mailbox identifier. To do this, run the following [Get-Recipient](/powershell/module/exchange/get-recipient) command:
69+
2. Find the duplicate or conflicting objects that use a mailbox identifier. To search, run the following [Get-Recipient](/powershell/module/exchange/get-recipient) command:
7470

7571
```powershell
7672
Get-Recipient -Identity "<mailbox identifier from error message>"
@@ -102,7 +98,7 @@ The system can't find one of the [recipients](/powershell/module/exchange/new-ma
10298

10399
3. If the command doesn't return a user object for a recipient, wait 30 minutes for synchronization to finish, and then recheck.
104100

105-
4. After you verify that the recipient has synced in EOP, retry your search.
101+
4. After you verify that the recipient is synced in EOP, retry your search.
106102

107103
[Back to top](#resolve-search-errors-in-ediscovery-standard)
108104

@@ -132,16 +128,8 @@ Your [eDiscovery search](/microsoft-365/compliance/ediscovery-search-for-content
132128

133129
### Cause
134130

135-
Issues that can cause this error include:
136-
137131
- A search query that returns too many results for the system to process. For example, a query that uses several wildcards can return a large result set.
138132

139-
- Other search errors. To check for those errors, run the following command to get information about the search, and then look for error messages in the output:
140-
141-
```powershell
142-
Get-ComplianceSearch -Identity <search name> | FL ResultDetails
143-
```
144-
145133
### Resolution
146134

147135
Retry your search. If your search still fails, split your search into smaller searches. For example, use date ranges or limit the number of search locations to return smaller result sets.
@@ -158,7 +146,7 @@ When you try to [search](/microsoft-365/compliance/ediscovery-search-for-content
158146
159147
### Cause
160148

161-
Your organization has reached the [maximum limit of 50 concurrent jobs](/microsoft-365/compliance/ediscovery-limits-for-content-search). Because export jobs typically take longer to finish than search jobs, export jobs are more likely to fill the quota.
149+
Your organization reached the [maximum limit of 50 concurrent jobs](/microsoft-365/compliance/ediscovery-limits-for-content-search). Because export jobs typically take longer to finish than search jobs, export jobs are more likely to fill the quota.
162150

163151
### Resolution
164152

@@ -201,25 +189,6 @@ To resolve the error, use the following procedure:
201189

202190
[Back to top](#resolve-search-errors-in-ediscovery-standard)
203191

204-
## Export issue: Export appears to be stalled
205-
206-
### Symptoms
207-
208-
You try to [export eDiscovery search results](/microsoft-365/compliance/ediscovery-export-content), but the export doesn't finish, and it appears to be stalled.
209-
210-
### Cause
211-
212-
Transient issues can stall the export process.
213-
214-
### Resolution
215-
216-
Restart the export.
217-
218-
> [!NOTE]
219-
> You can't restart an export of search results that were generated more than seven days earlier. Instead, rerun the search, and then start the export.
220-
221-
[Back to top](#resolve-search-errors-in-ediscovery-standard)
222-
223192
## Export error: "Item has been moved or deleted" or "Unable to retrieve item due to timeout"
224193

225194
### Symptoms
@@ -240,80 +209,6 @@ Wait for the system to retrieve and export the original mailbox items that are a
240209

241210
[Back to top](#resolve-search-errors-in-ediscovery-standard)
242211

243-
## Export error: "Request failed with status code 500" or "500 internal server error"
244-
245-
### Symptoms
246-
247-
When you try to [export or download eDiscovery search results,](/microsoft-365/compliance/ediscovery-export-content) you receive one of the following error messages:
248-
249-
- > Request failed with status code 500
250-
251-
- > 500 internal server error
252-
253-
### Cause
254-
255-
The issue can occur for any of the following reasons.
256-
257-
#### Cause 1
258-
259-
You don't have the [Export role](/microsoft-365/compliance/ediscovery-assign-permissions#rbac-roles-related-to-ediscovery). The Export role is automatically assigned to members of the eDiscovery Manager role group. The Export role isn't automatically assigned to members of the Organization Management role group.
260-
261-
#### Cause 2
262-
263-
The error occurs when you try to download exported search results if you're not the admin who exported the search results.
264-
265-
#### Cause 3
266-
267-
[Permissions filters](/microsoft-365/compliance/ediscovery-permissions-filtering-for-content-search) for your user account restrict the mailboxes, storage locations, or content that you can search and export.
268-
269-
#### Cause 4
270-
271-
The amount of exportable data for your search exceeds 2 TB. The maximum amount of exportable data for a single search is 2 TB. To determine the exportable data size, run the following command:
272-
273-
```PowerShell
274-
Get-ComplianceSearch -Identity <search name> | FL Size,SuccessResults,SearchStatistics
275-
```
276-
277-
### Resolution
278-
279-
Choose the resolution that corresponds to the applicable cause.
280-
281-
#### Resolution 1
282-
283-
If you're a member of the Organization Management role group, [add yourself to the eDiscovery Manager role group](/microsoft-365/compliance/ediscovery-assign-permissions#assign-ediscovery-permissions). You can do that on the [Permissions page](https://compliance.microsoft.com/compliancecenterpermissions) in the Microsoft Purview compliance portal, or by using the [Add-eDiscoveryCaseAdmin](/powershell/module/exchange/add-ediscoverycaseadmin) PowerShell cmdlet.
284-
285-
#### Resolution 2
286-
287-
Ask the admin who created the export to complete the download. To find that admin, run the following command:
288-
289-
```PowerShell
290-
Get-ComplianceSearchAction -Export -Case <case name> | FL Name,CreatedBy
291-
```
292-
293-
#### Resolution 3
294-
295-
For the mailboxes and storage locations that you want to search and export, check whether any [permissions filters](/microsoft-365/compliance/ediscovery-permissions-filtering-for-content-search) prevent those actions. If necessary, ask an admin to configure permissions filters.
296-
297-
#### Resolution 4
298-
299-
Reduce the download size by splitting your search into smaller searches. For example, use date ranges or limit the number of search locations to return smaller result sets.
300-
301-
To check whether the Search, Export, or Preview roles are assigned to the designated administrator account, run the following test in the Microsoft 365 admin center. You must have **Global** or **Compliance** administrator permissions to use the following steps.
302-
303-
> [!NOTE]
304-
> This diagnostic isn't available for the GCC High or DoD environments, or for Microsoft 365 operated by 21Vianet.
305-
306-
1. In the Microsoft 365 admin center, select the **Run Tests: eDiscovery RBAC check** button to populate the associated test:
307-
308-
> [!div class="nextstepaction"]
309-
> [Run Tests: eDiscovery RBAC Check](https://aka.ms/PillareDisRBACDiag)
310-
311-
1. In the **Run diagnostics** section, enter the UPN or email address of the user who is trying to run the Search, Export, or Preview task.
312-
1. Select **Run Tests**.
313-
1. If the user doesn't have the necessary eDiscovery roles assigned, assign those roles so that the user can run the desired task.
314-
315-
[Back to top](#resolve-search-errors-in-ediscovery-standard)
316-
317212
## Export error: "File wasn't exported because it doesn't exist" or "File not found"
318213

319214
### Symptoms
@@ -334,71 +229,23 @@ To resolve the issue, reindex the SharePoint Online or OneDrive for Business loc
334229

335230
[Back to top](#resolve-search-errors-in-ediscovery-standard)
336231

337-
## Export download issue: Slow download of exported search results
232+
## Export download issue: eDiscovery export doesn't download any files
338233

339234
### Symptoms
340235

341-
When you [download eDiscovery search results](/microsoft-365/compliance/ediscovery-export-content), the download takes longer than expected.
342-
343-
### Cause
344-
345-
Issues that can cause a slow download include:
346-
347-
- A large amount of export data. To determine the download size, run the following command:
348-
349-
```PowerShell
350-
Get-ComplianceSearch -Identity <search name> | FL Size,SuccessResults,SearchStatistics
351-
```
352-
353-
- A higher-than-usual load on the mailbox servers.
354-
355-
- Other download errors. To check for those errors:
356-
357-
- Run the following command to get information about an in-progress export. Look for error messages in the command output.
358-
359-
```powershell
360-
Get-ComplianceSearchAction | FL Results
361-
```
362-
363-
- Look for error messages in the *trace.log* file in the downloaded export folder.
364-
365-
### Resolution
366-
367-
To reduce the download size, split your search into smaller searches. For example, use date ranges or limit the number of search locations to return smaller result sets.
368-
369-
[Back to top](#resolve-search-errors-in-ediscovery-standard)
370-
371-
## Export download issue: eDiscovery export tool doesn't download any files
372-
373-
### Symptoms
374-
375-
You run the eDiscovery export tool to [download eDiscovery search results](/microsoft-365/compliance/ediscovery-export-content). However, after the operation finishes, the **Estimated Total** field in the tool window shows that no files were downloaded.
236+
You run the eDiscovery export to [download eDiscovery search results](/purview/edisc-search-export). However, after the operation finishes, the **Estimated Total** field in the tool window shows that no files were downloaded.
376237

377238
### Cause
378239

379240
The issue can occur for any of the following reasons:
380241

381-
- Antivirus software on the destination computer blocks the download.
382-
383-
- You select a download drive that isn't a local drive.
242+
- Browser not configured to allow pop-ups.
384243

385-
- You select a destination folder that's either:
386-
387-
- The download folder of another eDiscovery export.
388-
389-
- The parent folder of the download folder of another eDiscovery export. Because the export tool saves metadata files in the parent folder, metadata files for different downloads can conflict with one another.
244+
- Some Network endpoints are not allowed for downloads in your organization.
390245

391246
### Resolution
392247

393-
Try each of the following methods in the given order until the issue is resolved:
394-
395-
1. Pause the antivirus scanner on the destination computer, and then retry the download.
396-
397-
2. Download to a local drive. If necessary, download to a different client computer.
398-
399-
3. Select a destination folder that doesn't conflict with any concurrent eDiscovery export.
400-
401-
4. Disable export to a compressed folder, and disable deduplication of Exchange content. If this step resolves the issue, then the cause is probably antivirus software blocking the download or that you tried to download to a remote drive.
248+
If you're experiencing issues that affect the download, see [Best practices for downloading export packages](/purview/edisc-search-export).
402249

403250
[Back to top](#resolve-search-errors-in-ediscovery-standard)
404251

@@ -419,39 +266,3 @@ You might see this error message if your search includes Microsoft SharePoint On
419266
No resolution is required. You can safely ignore the error message.
420267

421268
[Back to top](#resolve-search-errors-in-ediscovery-standard)
422-
423-
## Export download error: "Cannot access the file 'ExportData.db'"
424-
425-
### Symptoms
426-
427-
You run the eDiscovery export tool to [download eDiscovery search results](/microsoft-365/compliance/ediscovery-export-content), but the download gets stuck or produces zero-byte files. You see the following error message in the *trace.log* file in the downloaded export folder:
428-
429-
> Hit tolerable error, will retry: The process cannot access the file 'ExportData.db' because it is being used by another process.
430-
431-
### Cause
432-
433-
The issue can occur if:
434-
435-
- Antivirus software on the destination computer blocks the download.
436-
437-
- You select a download drive that isn't a local drive.
438-
439-
- You select a destination folder that's either:
440-
441-
- The download folder of another eDiscovery export.
442-
443-
- The parent folder of the download folder of another eDiscovery export. Because the export tool saves metadata files in the parent folder, metadata files for different downloads can conflict.
444-
445-
### Resolution
446-
447-
Try each of the following methods in the given order until the error is resolved:
448-
449-
1. Pause the antivirus scanner on the destination computer, and then retry the download.
450-
451-
2. Download to a local drive. If necessary, download to a different client computer.
452-
453-
3. Select a destination folder that doesn't conflict with any concurrent eDiscovery export.
454-
455-
4. Disable export to a compressed folder, and disable deduplication of Exchange content. If this step resolves the issue, then the cause is probably antivirus software blocking the download or that you tried to download to a remote drive.
456-
457-
[Back to top](#resolve-search-errors-in-ediscovery-standard)

0 commit comments

Comments
 (0)