Vault
| eventName | Description | Sample | Rule |
|---|---|---|---|
| any | Source-only rules that filter on applicationName 'vault' without specifying an eventName attribute here. | N | N |
| create_ | An eDiscovery matter (investigation) creation was initiated in Google Vault. | N | N |
| create_ | An eDiscovery matter (investigation) was created in Google Vault. | N | N |
| create_ | An export job was initiated in Google Vault. | N | N |
| create_ | An export job completed in Google Vault. | N | N |
| export | Data was exported from Google Vault. | N | N |
| export_ | A Vault export file was downloaded. | N | N |
| add_ | A litigation hold was initiated in Google Vault. | N | N |
| add_ | A litigation hold was established in Google Vault. | N | N |
| delete_ | An eDiscovery matter deletion was initiated in Google Vault. | N | N |
| delete_ | An eDiscovery matter was deleted from Google Vault. | N | N |
| deletion_ | A deletion search was executed in Google Vault. | N | N |
| add_ | A data preservation rule was initiated in Google Vault. | N | N |
| add_ | A data preservation rule was created in Google Vault. | N | N |
any: Vault (any event)
#Description
Source-only rules that filter on applicationName 'vault' without specifying an eventName attribute here.
References #
create_investigation_begin: Create Investigation (Begin)
#Description
An eDiscovery matter (investigation) creation was initiated in Google Vault.
References #
create_investigation_end: Create Investigation (End)
#Description
An eDiscovery matter (investigation) was created in Google Vault.
References #
create_export_begin: Create Export (Begin)
#Description
An export job was initiated in Google Vault.
References #
create_export_end: Create Export (End)
#Description
An export job completed in Google Vault.
References #
export_file_download: Export File Download
#Description
A Vault export file was downloaded.
References #
add_litigation_hold_begin: Add Litigation Hold (Begin)
#Description
A litigation hold was initiated in Google Vault.
References #
add_litigation_hold_end: Add Litigation Hold (End)
#Description
A litigation hold was established in Google Vault.
References #
delete_investigation_begin: Delete Investigation (Begin)
#Description
An eDiscovery matter deletion was initiated in Google Vault.
References #
delete_investigation_end: Delete Investigation (End)
#Description
An eDiscovery matter was deleted from Google Vault.
References #
deletion_search: Deletion Search
#Description
A deletion search was executed in Google Vault.
References #
add_preservation_rule_begin: Add Preservation Rule (Begin)
#Description
A data preservation rule was initiated in Google Vault.