eDiscovery Search Misses SharePoint Files: Root Cause and Fix
🔍 WiseChecker

eDiscovery Search Misses SharePoint Files: Root Cause and Fix

When you run an eDiscovery search in Microsoft Purview, the results might not include SharePoint files you expect to find. This problem often occurs because the search scope, indexing status, or content type is not configured correctly. The root cause is usually a mismatch between where the search is running and where the files are stored, or the files themselves are not fully indexed. This article explains the technical reasons behind missing search results and provides a step-by-step fix to ensure eDiscovery searches return all relevant SharePoint files.

Key Takeaways: Fixing eDiscovery Searches That Miss SharePoint Files

  • Microsoft Purview > eDiscovery > Search: Verify the search scope includes the correct SharePoint sites and document libraries.
  • SharePoint admin center > Search > Managed Properties: Check that the file metadata is mapped to a searchable managed property.
  • Site Collection Admin > Site Settings > Search and Offline Availability: Ensure the site is set to allow indexing of the content.

ADVERTISEMENT

Why eDiscovery Searches Fail to Find SharePoint Files

The root cause of missing SharePoint files in eDiscovery search results is almost always related to one of three areas: search scope misconfiguration, incomplete or failed indexing, or content type restrictions. Each of these issues prevents the eDiscovery system from locating files that exist on the SharePoint platform.

Search Scope Misconfiguration

eDiscovery searches are scoped by location. If the search is configured to look only at specific sites or libraries, files stored elsewhere will not appear. Common mistakes include selecting the wrong site collection, omitting a subsite, or not including a specific document library. The search scope is defined in the Microsoft Purview compliance portal under the eDiscovery case.

Incomplete or Failed Indexing

SharePoint uses a search index to make files discoverable. If a file is not indexed, eDiscovery cannot find it. Indexing fails for several reasons: the file type is not supported, the file is corrupted, the file exceeds the maximum size limit (currently 150 MB for SharePoint Online), or the site is set to not allow indexing. Unsupported file types include executables (.exe), compressed archives (.zip, .rar), and certain image formats (.bmp).

Content Type Restrictions

eDiscovery searches can filter by content type or file extension. If the search query includes a filter that excludes the file type of the missing files, those files will not appear. For example, a search that only looks for .docx files will miss .pdf files. The default eDiscovery search does not filter by file type, but custom queries often include such restrictions.

Steps to Fix eDiscovery Search Missing SharePoint Files

Follow these steps in order to identify and resolve the cause of missing files. Perform each step and test the search after each change to isolate the issue.

  1. Verify the eDiscovery search scope
    Open the Microsoft Purview compliance portal. Go to eDiscovery > Cases and open the case that contains the search. Select the search and click Edit search. On the Locations page, confirm that the SharePoint sites you expect are listed. If they are missing, add them by clicking Choose sites and selecting the correct site collections. Include subsites by selecting the Include all subsites option.
  2. Check the indexing status of the site
    In the SharePoint admin center, go to More features > Search > Manage Search Schema. Under Crawl Log, enter the site URL and click Search. Look for the status of the last crawl. If the status is Failed or Pending, the site content is not fully indexed. Request a full re-index by going to the site collection settings in SharePoint: Site Settings > Search and Offline Availability > Reindex site. Click Reindex site and wait for the next crawl cycle.
  3. Confirm file types are supported and indexed
    In the SharePoint admin center, go to More features > Search > Manage Search Schema. Under File Types, review the list of indexed file extensions. If the missing files use a file type not in the list, add it. For example, if you need to search .msg files, add msg to the list. Note that some file types like .zip are not supported for indexing at all.
  4. Review the search query for content type restrictions
    In the eDiscovery search, go to the Query section. If you used a keyword query that includes a file type filter, such as filetype:docx, remove that filter or expand it to include all file types. Use filetype: to include every file type. Alternatively, leave the query field empty to return all items in the selected locations.
  5. Check retention and compliance policies
    If a file is subject to a retention policy that places a hold on the site, it might be moved to the Preservation Hold library. This library is not indexed by default. In the SharePoint site, go to Site Contents > Preservation Hold Library. If the missing files are there, include this library in the eDiscovery search scope by adding the site and selecting All libraries.

ADVERTISEMENT

If SharePoint Files Are Still Missing After the Main Fix

Even after following the main fix, some files may remain undetected. The following scenarios describe additional causes and their solutions.

Files in a Subsite or Hub Not Included in the Search

eDiscovery searches do not automatically include all subsites or hub sites. You must add each site explicitly. In the search locations, click Choose sites and select every site collection that might contain relevant files. For hub sites, add the hub site itself and each associated site individually.

Files Created After the Last Crawl

If a file was uploaded after the most recent search index crawl, it will not appear in search results. In the SharePoint admin center, go to More features > Search > Crawl Log to see the last crawl date for each site. To force an immediate crawl, go to the site settings and click Reindex site. The crawl will start within minutes for small sites.

Files with Non-English Characters or Special Symbols

SharePoint search has known issues with certain Unicode characters. Files named with characters outside the ASCII range, such as Chinese, Arabic, or Cyrillic, may not be indexed correctly. Rename the file using only English letters, numbers, and hyphens. Then reindex the site.

eDiscovery Search Scope vs Indexing Status: Key Differences

Item Search Scope Indexing Status
Definition Which sites and libraries are included in the search Whether the content of those sites has been processed and stored in the search index
Where to check Microsoft Purview > eDiscovery > search locations SharePoint admin center > Search > Crawl Log
Common issue Missing sites or libraries in the location list Failed or pending crawl for the site
Fix Add or edit the location selection Request a full re-index of the site

You can now identify why eDiscovery searches miss SharePoint files and apply the correct fix. Start by checking the search scope in Microsoft Purview, then verify the indexing status in the SharePoint admin center. For persistent issues, review the file type support and consider renaming files with special characters. An advanced tip is to create a custom search schema managed property for metadata fields that are not indexed by default, such as custom columns in document libraries.

ADVERTISEMENT