In this post we will also  describe how we can do eDiscovery in new Office 365

1- Log on to http://portal.microsoftonline.com with O365 Administrator credentials

2- At the tabs at the top hit on Admin and select Exchange

3- In Exchange admin center select Permissions > admin roles

                        Double click Discovery Management
Under Roles Click on Add and Select Mailbox Import Export
Under Member, Add yourself as a Member and Click Save. 

4- Now click on compliance management and select in-place eDiscovery & hold

5- Now you can start creating search request as below

6- Select the mailboxes you want to search

7- In the next screen if options are greyed out as below it means you do not have proper permissions. Revisit the step for adding permissions. If proper permissions have been added sign out and sign in back

8- In the filed provide the text you want to search. You can use Boolean expression like OR and AND to make robust query

9- Once you have specified the search attributes hit on Next

10- You can do a in place hold of the search items.(Note, this option will be greyed out if you have selected all mailboxes during the mailbox selection process) and hit on finish

11- You can estimate the result search or you can export the results to PST , below we will show how to export the result as PST

12- After pressing the export button , you will find some application running on your local laptop

13- Fill in the the location of the PST and then press on Start

14- Fill in your your Office 365 admin user and press on OK

15- Press close and browse to the location of the exported files , you should see 3 files (TEXT – Excel – PST ) as below

This PST contain the result of the search