Microsoft Exchange - Perform Email Search and Deletion flow

  • Freigeben Version: Australia
  • Aktualisiert 12. März 2026
  • 3 Minuten Lesedauer

    • When the Microsoft Exchange - Perform Email Search and Deletion flow is executed, it searches the Exchange server using the search query provided, and returns the details to the on-premises instance.

    Vorbereitungen

    Role required: sn_si.analyst

    Warum und wann dieser Vorgang ausgeführt wird

    The Microsoft Exchange - Perform Email Search and Deletion flow is executed when email searches are set up and the Delete from Email Server(s) or Search on Email Server(s) button are pressed.

    Actions specific to this integration are described here. For more information on other actions, see Common Security Operations integration flows and orchestration activities.

    The flow actions include:

    Create Compliance Search Preview Action

    The Create Compliance Search Preview Action creates a new compliance search action of type preview on the exchange server for the created compliance search.

    Input variables

    Input variables determine the initial behavior of the action.

    Variable Description
    targetId Mandatory target host identifier field where the Exchange Server is located.
    searchName Mandatory name of compliance search created on exchange server.

    Exit Conditions

    Possible exit conditions for this action are:

    Tabelle : 1. Exit Conditions
    Variable Description
    Complete When compliance search action is successfully created.
    Error Creating Action When creation of compliance search action fails due to exception in exchange server.
    Error When exception occurs in flow action.

    Check Preview Action Status

    The Preview Action Status checks the status of compliance search action of type preview and returns the preview information of the emails found like recipient, sender, subject, email date received.

    Input variables

    Input variables determine the initial behavior of the activity.

    Variable Description
    targetId Mandatory target host identifier field where the Exchange Server is located.
    searchName Mandatory name of compliance search created on exchange server.

    Output variables

    The output variables contain data that can be used in subsequent actions.

    Tabelle : 2. Output variables
    Variable Description
    response Contains the status of compliance search action and the preview information of the email found as a part of compliance search.

    Exit Conditions

    Possible exit conditions for this action are:

    Tabelle : 3. Exit Conditions
    Variable Description
    Preview in Progress When status of compliance search action is in progress.
    No Mail Found When status of compliance search action is completed, and no emails are found as a part of compliance search.
    Preview Complete When status of compliance search action is completed, and emails are found as a part of compliance search.
    Error Checking Status When status checking fails due to exception in exchange server.
    Error When exception occurs in workflow activity.

    Create Compliance Search Delete Action

    The Create Compliance Search Delete Action creates a new compliance search action of type purge on the exchange server for the created compliance search.

    Input variables

    Input variables determine the initial behavior of the action.

    Variable Description
    targetId Mandatory target host identifier field where the Exchange Server is located.
    searchName Mandatory name of compliance search created on exchange server.

    Exit Conditions

    Possible exit conditions for this action are:

    Tabelle : 4. Exit Conditions
    Variable Description
    Complete When compliance search action is successfully created.
    Error Creating Action When creation of compliance search action fails due to exception in exchange server.
    Error When exception occurs in flow action.

    Check Delete Action Status

    The Check Delete Action Status checks the status of compliance search action of type purge and performs soft delete operation on the exchange server for the emails found as a part of compliance search.

    Input variables

    Input variables determine the initial behavior of the action.

    Variable Description
    targetId Mandatory target host identifier field where the Exchange Server is located.
    searchName Mandatory name of compliance search created on exchange server.

    Output variables

    The output variables contain data that can be used in subsequent actions.

    Tabelle : 5. Output variables
    Variable Description
    response Contains the status of compliance search action and count of emails deleted, which were found as a part of compliance search.

    Exit Conditions

    Possible exit conditions for this action are:

    Tabelle : 6. Exit Conditions
    Variable Description
    Delete in Progress When status of compliance search action is in progress.
    No Mail Found When status of compliance search action is completed, and no emails are deleted as a part of compliance search.
    Delete Complete When status of compliance search action is completed, and emails are deleted as a part of compliance search.
    Error Checking Status When status checking fails due to exception in exchange server.
    Error When exception occurs in flow action.

    Remove Compliance Search Action

    The Remove Compliance Search action removes the created compliance search from exchange server.

    Input variables

    Input variables determine the initial behavior of the action.

    Variable Description
    targetId Mandatory target host identifier field where the Exchange Server is located.
    searchName Mandatory name of compliance search created on exchange server.