Export data from Vault

After you identify and collect the data pertinent to your Google Workspace eDiscovery project with search, you can export it for further analysis.

Note: To search for and export data, your Google Workspace administrator must assign you Manage Matters, Manage Searches, and Manage Exports privileges.

Start an export

These steps are for new Vault (vault.google.com). Go to steps for classic Vault

  1. If you haven't already, sign in to https://vault.google.com, open the matter you want to export data from, and search for the data.
  2. Click Export.
  3. Enter a descriptive name for the export.
  4. If your organization has a data region policy, select the data region for the export.
  5. Set service-specific export options:
    1. For Gmail, you can include or exclude the content of confidential mode messages. If you exclude confidential mode message content, your export includes only the message metadata.
    2. For messages, choose the format for message content files, PST or mbox. Learn more about formats.
    3. For items in Drive, choose to include access level information for accounts with indirect access in the metadata file.
  6. Click Export.

    Note: You can have no more than 20 exports in progress across your organization.

  7. To review the status of an export, click Exports. When the export is complete, the Status column has a green checkmark and the Download button is enabled.

  8. If your export takes more than 24 hours, Vault stops the export and delivers partial results. To get complete results, resume the export.
  9. Download your exported data promptly. Export files are available for 15 days after you start the export, and then they're automatically deleted.

Exports with partial results

Large exports can take several hours to process. If a large export hasn’t completed after 24 hours, Vault stops the export and delivers partial results. You can then restart the export where it left off.

After an export has run for 24 hours, Vault stops the process and notes that the Export contains partial results. You can download the messages and items Vault was able to retrieve up to that point, along with a CSV file that lists the accounts that weren't exported.

Click Continue export to resume processing the export. Give the export a new name, and Vault gathers more messages and items for another 24 hours. You can continue an export as many times as necessary to retrieve all the messages and items that matched your query.

Tip: If your export takes too long, consider canceling it and trying a different search strategy:
  • If possible, identify the accounts you need to export and perform several searches, each on a few of accounts.
  • Perform several searches using date ranges. For example, search for messages sent in 2013, then do another search for messages sent in 2014.

Download an export

These steps are for new Vault (vault.google.com). Go to steps for classic Vault

  1. If you haven't already, sign in to https://vault.google.com.
  2. Click Matters and then the matter that contains the export.
  3. Click Exports.
  4. Point to the export you want to download and click Download.
  5. In the popup that opens, next to each file you want to download, click Download.
  6. Click Done.
  7. To learn how to process and analyze the exported files, see review Vault export files.

 


Use classic Vault

Click below to open steps for classic Vault (ediscovery.google.com). Go to steps for new Vault

Export Vault data in ediscovery.google.com

Start an export

  1. If you haven't already, create a matter and search for the messages or items you want to export.
  2. From your list of search results, click Export results.
  3. Enter a name for the export.
  4. Choose a data region.
  5. Depending on the type of data you export:
    • For message exports, choose either PST or mbox. You can also choose whether to include the contents of any confidential mode messages that might be included in your export.
    • For Drive exports, decide whether you want to include access level information for users with indirect access to files.
  6. Click Start Export.

    Note: You can have no more than 20 exports in progress across your organization.

  7. If your export takes more than 24 hours, Vault stops the export and delivers partial results. To get complete results, resume the export.

The Export page displays the status of your export. You can continue working within Vault while the export is in progress. When your export is complete, you see a green checkmark next to name of your export.

Download an export

  1. After the export completes, click View completed files under the name of your export. If your export is complete and you don't see this link, refresh the page.
  2. Click Download next to a file to download it.

Note: Export files are available for 15 days after you start the export, and then they're automatically deleted.

To analyze the files exported from Vault, see review Vault export files.

Was this helpful?
How can we improve it?