Back to Collection Items
Dim fso, outFile
Set fso = CreateObject("Scripting.FileSystemObject")
'Create a Unicode (utf-16) output text file.
Set outFile = fso.CreateTextFile("output.txt", True, True)
' This example assumes the Chilkat API to have been previously unlocked.
' See Global Unlock Sample for sample code.
' For versions of Chilkat < 10.0.0, use CreateObject("Chilkat_9_5_0.Http")
set http = CreateObject("Chilkat.Http")
' Use this online tool to generate code from sample JSON: Generate Code to Create JSON
' The following JSON is sent in the request body.
' {
' "displayName": "Microsoft Graph Search",
' "description": "This is an eDiscovery Premium search using Microsoft Graph",
' "contentQuery": "HasAttachment=true",
' "custodianSources@odata.bind": [
' "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/{{ediscoveryCaseId}}/custodians/{{custodianId}}/userSources/{{custodianUserSource}}"
' ],
' "noncustodialSources@odata.bind": [
' "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/{{ediscoveryCaseId}}/noncustodialdatasources/{{noncustodialDataSource}}"
' ]
' }
' For versions of Chilkat < 10.0.0, use CreateObject("Chilkat_9_5_0.JsonObject")
set json = CreateObject("Chilkat.JsonObject")
success = json.UpdateString("displayName","Microsoft Graph Search")
success = json.UpdateString("description","This is an eDiscovery Premium search using Microsoft Graph")
success = json.UpdateString("contentQuery","HasAttachment=true")
success = json.UpdateString("""custodianSources@odata.bind""[0]","https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/{{ediscoveryCaseId}}/custodians/{{custodianId}}/userSources/{{custodianUserSource}}")
success = json.UpdateString("""noncustodialSources@odata.bind""[0]","https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/{{ediscoveryCaseId}}/noncustodialdatasources/{{noncustodialDataSource}}")
' Adds the "Authorization: Bearer <access_token>" header.
http.AuthToken = "<access_token>"
' resp is a Chilkat.HttpResponse
Set resp = http.PostJson3("https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/{{ediscoveryCaseId}}/searches","application/json",json)
If (http.LastMethodSuccess = 0) Then
outFile.WriteLine(http.LastErrorText)
WScript.Quit
End If
outFile.WriteLine(resp.StatusCode)
outFile.WriteLine(resp.BodyStr)
outFile.Close
Curl Command
curl -X POST
-H "Authorization: Bearer <access_token>"
-d '{
"displayName": "Microsoft Graph Search",
"description": "This is an eDiscovery Premium search using Microsoft Graph",
"contentQuery": "HasAttachment=true",
"custodianSources@odata.bind": [
"https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/{{ediscoveryCaseId}}/custodians/{{custodianId}}/userSources/{{custodianUserSource}}"
],
"noncustodialSources@odata.bind": [
"https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/{{ediscoveryCaseId}}/noncustodialdatasources/{{noncustodialDataSource}}"
]
}'
https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/{{ediscoveryCaseId}}/searches
Postman Collection Item JSON
{
"name": "Create searches",
"event": [
{
"listen": "test",
"script": {
"exec": [
"var json = JSON.parse(responseBody);",
"postman.setEnvironmentVariable(\"ediscoverySearchId\", json.id);"
],
"type": "text/javascript"
}
}
],
"request": {
"method": "POST",
"header": [
],
"body": {
"mode": "raw",
"raw": "{\n \"displayName\": \"Microsoft Graph Search\",\n \"description\": \"This is an eDiscovery Premium search using Microsoft Graph\",\n \"contentQuery\": \"HasAttachment=true\",\n \"custodianSources@odata.bind\": [\n \"https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/{{ediscoveryCaseId}}/custodians/{{custodianId}}/userSources/{{custodianUserSource}}\"\n ],\n \"noncustodialSources@odata.bind\": [\n \"https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/{{ediscoveryCaseId}}/noncustodialdatasources/{{noncustodialDataSource}}\"\n ]\n}",
"options": {
"raw": {
"language": "json"
}
}
},
"url": {
"raw": "https://graph.microsoft.com/v1.0/security/cases/ediscoveryCases/{{ediscoveryCaseId}}/searches",
"protocol": "https",
"host": [
"graph",
"microsoft",
"com"
],
"path": [
"v1.0",
"security",
"cases",
"ediscoveryCases",
"{{ediscoveryCaseId}}",
"searches"
]
}
},
"response": [
]
}