Fix Teams eDiscovery Search Misses Chat Messages for a Recorded Meeting

When you run an eDiscovery search in Microsoft Purview, you may notice that chat messages sent during a recorded Teams meeting do not appear in the results. This happens because meeting chat transcripts are stored separately from the meeting recording and are not always indexed the way you expect. The root cause is that Teams stores chat messages in the Exchange Online mailboxes of the meeting participants, while the recording itself is stored in OneDrive or SharePoint. This article explains why the search misses those messages and provides the exact steps to configure eDiscovery so you capture all chat content from recorded meetings.

You will learn how to adjust your eDiscovery search query, use the correct content locations, and verify that the chat messages are included in your results. We also cover common pitfalls, such as searching only the meeting organizer’s mailbox, and how to avoid them. By the end, you will be able to run a comprehensive eDiscovery search that finds every chat message tied to a recorded meeting.

Why eDiscovery Misses Chat Messages from Recorded Meetings

Teams meeting chat messages are not stored in a single central location. Instead, each message is delivered to the Exchange Online mailbox of every participant who is part of the chat. For a meeting that includes external guests or users from other tenants, the messages may reside in multiple mailboxes across different organizations. When you run an eDiscovery search, you must explicitly include those mailboxes in your search scope. If you only search the meeting organizer’s mailbox, you will miss messages sent by other participants.

Another factor is that the meeting recording is not a chat message. The recording file is stored in OneDrive for Business for non-channel meetings or in SharePoint for channel meetings. eDiscovery searches for chat messages and recordings as separate items. If your search query targets only the recording or only the chat, you will not get both. To capture everything, you need to search both the relevant mailboxes and the site where the recording is stored.

Finally, the indexing delay can cause messages to be missed. When a meeting ends, the chat transcript may take up to 24 hours to become fully searchable. If you run your eDiscovery search immediately after the meeting, the chat messages may not be indexed yet. Waiting for the indexing to complete is part of the fix.

Steps to Capture All Chat Messages in eDiscovery

Follow these steps to run an eDiscovery search that includes chat messages from recorded meetings. The steps assume you have the necessary permissions in Microsoft Purview.

1. Open Microsoft Purview compliance portal
   Go to https://compliance.microsoft.com and sign in with an account that has eDiscovery Manager permissions. If you do not have these permissions, ask your administrator to assign them.
2. Create a new eDiscovery case
   In the left navigation, select eDiscovery then Standard. Click Create a case and give it a name, such as “Meeting Chat Search”. Add a description and click Save.
3. Create a search within the case
   Open the case, go to the Searches tab, and click New search. Provide a name for the search, for example “Chat messages for recorded meeting”.
4. Add all participant mailboxes as content locations
   Under Locations, choose Exchange mailboxes. Click Choose users, groups, or teams and add the mailboxes of every participant in the meeting. Include the organizer and all attendees who sent or received chat messages. To add a team, select the team name to include all members’ mailboxes.
5. Include the meeting recording site
   If the meeting was recorded, add the SharePoint site or OneDrive location where the recording is stored. Under Locations, select SharePoint sites and enter the URL of the site. For non-channel meetings, the recording is in the organizer’s OneDrive. For channel meetings, it is in the channel’s SharePoint site.
6. Set the search query to filter for chat messages
   In the Keywords field, enter kind:im to target instant messages. You can add additional keywords to narrow the results, such as a specific topic or the meeting name. For example: kind:im AND "project discussion".
7. Run the search
   Click Search at the bottom. Wait for the search to complete. The time depends on the number of mailboxes and the volume of data. Check the Status column to ensure it says Completed.
8. Preview and verify the results
   Open the search and click Preview results. Look for chat messages from the meeting. If you see no messages, review the steps above to confirm you added all participant mailboxes and used the correct query.
9. Export the results if needed
   To download the results, click Export results and follow the prompts. Choose the export options that match your requirements, such as including the chat transcripts as individual files.

If eDiscovery Still Misses Chat Messages

The steps above resolve most cases, but some situations require additional attention.

Teams Chat Messages Are Not Searchable Because of Retention Policies

If your organization has a retention policy that deletes Teams chat messages after a short period, the messages may no longer exist. Check your retention policies in the Microsoft Purview portal. Go to Data lifecycle management then Microsoft 365 and review the policies that apply to Teams. If the policy deletes messages too quickly, adjust it to retain chat data for the duration required by your compliance obligations.

Search Results Show Only the Meeting Organizer’s Messages

When you add only the organizer’s mailbox, you only see messages that the organizer sent or received. Other participants’ messages are in their own mailboxes. To capture all messages, you must add every participant’s mailbox. Use the Choose users, groups, or teams option and select the group that contains all meeting attendees. If you are not sure who attended, check the meeting invite or the attendance report in Teams.

Chat Messages Appear Only After a Delay

Teams may take up to 24 hours to index chat messages after a meeting ends. If you run the search immediately, the messages may not appear. Wait at least a few hours and then run the search again. This delay is normal and is not a sign of a configuration error.

The Recording File Is Missing from Search Results

The recording is not a chat message, so searching with kind:im will not return it. To find the recording, you need to search the OneDrive or SharePoint site where it is stored. Remove the kind:im filter and search for the recording file name or the meeting title. You can also use the File type filter and select Video to narrow down the results.

New Teams eDiscovery vs Classic eDiscovery: Key Differences

Item	New eDiscovery (Purview)	Classic eDiscovery (Security & Compliance Center)
Interface	Integrated in Microsoft Purview compliance portal	Separate portal at protection.office.com
Chat message indexing	Uses the same Exchange indexing engine, but with improved search latency	Relies on the older Exchange search, which may have longer delays
Content location selection	Allows adding teams and groups directly	Requires manual addition of each mailbox
Retention policy integration	Seamless with Microsoft 365 retention policies	Requires separate configuration
Support for Teams chat	Fully supports kind:im and chat transcripts	Supports but with known indexing gaps

The new eDiscovery experience in Microsoft Purview is the recommended option because it provides better control over content locations and integrates with modern retention policies. If you are still using the classic portal, consider migrating to the new experience to avoid missing chat messages.

To verify that your search captures all chat messages, run a test search with a known message from a recorded meeting. If the message appears, your configuration is correct. If not, revisit the steps and check the retention policy and indexing delay.

For advanced scenarios, you can use PowerShell with the Compliance Search cmdlets to automate the addition of mailboxes and run searches programmatically. This is useful when you need to search across many meetings or on a recurring basis.

Remember that eDiscovery searches are subject to your organization’s permissions. Only users with the eDiscovery Manager role can create and run searches. If you cannot access the compliance portal, contact your Microsoft 365 administrator.

By following the steps in this article, you can ensure that eDiscovery searches for recorded Teams meetings return all chat messages. Add every participant’s mailbox, use the kind:im filter, and account for indexing delays. Test your search with a known message to confirm it works. Then apply the same approach to future meetings to maintain full compliance coverage.