Google Vault - Display Results

Ques and displays vault search result.

Dependencies

This playbook uses the following sub-playbooks, integrations, and scripts.

Sub-playbooks

  • GenericPolling

Integrations

This playbook does not use any integrations.

Scripts

  • PrintErrorEntry

Commands

  • gvault-get-groups-results
  • gvault-download-results
  • gvault-export-status
  • gvault-get-mail-results
  • gvault-get-drive-results

Playbook Inputs


NameDescriptionDefault ValueRequired
pollIntervalThe interval in which to check the export status (in minutes).2Optional
pollTimeoutThe timeout to terminate the poll (in minutes).30Optional
maxResultForDisplayThe maximum number of result to be displayed.30Optional
downloadFileWhether the export file created will be downloaded into the War Room. "True" means it will.falseOptional
ExportIDThe export ID.-Required
MatterIDThe matter ID.-Required
SearchtTypeThe type of Search. Can be, "Drive", "Groups" or "Mail".-Required

Playbook Outputs


PathDescriptionType
GoogleVault.Matter.Export.MatterIDThe matter ID.string
GoogleVault.Matter.Export.ExportIDThe export ID.string
GoogleVault.Matter.Export.NameThe export's name.string
GoogleVault.Matter.Export.CreateTimeThe export's creation time.string
GoogleVault.Matter.Export.Results.CCThe CC of the mail.string
GoogleVault.Matter.Export.Results.BCCThe BCC of the mail.string
GoogleVault.Matter.Export.Results.DateSentThe date the email was sent.string
GoogleVault.Matter.Export.Results.FromThe sender of the email.string
GoogleVault.Matter.Export.Results.SubjectThe subject of the email.string
GoogleVault.Matter.Export.Results.DateReceivedThe date the email was received.string
GoogleVault.Matter.Export.Results.ToThe address the email was sent to.string
GoogleVault.Matter.Export.StatusThe export Status. Can be, "COMPLETED", "FAILED", or "IN_PROGRESS".string
GoogleVault.Matter.Export.BucketNameThe bucket holder name for this export.string
GoogleVault.Matter.Export.DownloadIDThe ID to be used by the download-export command.string
GoogleVault.Matter.Export.ViewIDThe ID to be used by the get-X-results command (X=drive/mail/groups).string
GoogleVault.Matter.ExportThe export object.unknown

Playbook Image


Display_Results_GVault