Outlook · for ediscovery specialists
Outlook for ediscovery specialists on Mac: search, sort, and check mail in 2026
Outlook for ediscovery specialists on Mac is mostly for searching, sorting, and reading mail. The heavy work, such as collection and export, runs in Microsoft Purview eDiscovery in a browser. This page covers the Outlook steps that matter for that job, the limits that break exports, and where Lazur helps.
You say“How do I find one sender's emails that have attachments?”
Lazur · walks you through itLazur points at the search box and the Filters icon, then guides you one click at a time, waiting for each click.
Quick answer
- Use Outlook to search, sort, and check messages. Use Microsoft Purview to collect and export.
- Search with Advanced Query Search keywords such as From:, Sent:, and HasAttachment. Test each query on a known message first.
- Purview exports run at 2 GB per hour per mailbox, expire 14 days after creation, and are cancelled after seven days.
- Ask Lazur to point at the Filters icon, walk you through a search, or draft a status note. It does not click for you.
41%
of 101 legal professionals named lack of time as their biggest individual challenge
EDRM, More data, fewer resources (2026)14 days
before a Purview export package expires and its data is deleted
Export search results in eDiscovery (Microsoft Learn)64%
of 2024 eDiscovery task spending went to review, a cost share and not a time share
ComplexDiscovery, 2025 eDiscovery Review UpdateWhat ediscovery specialists ask Lazur in Outlook
Hold ⌥ ⌘ in Outlook and say it.
“Where is the Filters icon in this search box?”
Lazur circles the Filters icon at the end of the search box and labels it.
Points at it · Outlook
“Walk me through a search for one sender with attachments.”
Lazur guides you one click at a time and waits for each click before the next step.
Walks you through it · Outlook
“What do AND and OR do in an Outlook search?”
Lazur answers out loud with an example, then reminds you to test the query on a known message.
Explains what's on screen · Outlook
“Read me the sender and subject of this message.”
Lazur reads the sender and subject aloud from the message on your screen.
Explains what's on screen · Outlook
“Draft a status note saying the Purview export is ready to download.”
Lazur drafts the note as text. You read it and send it yourself, from your own account.
Drafts it · Outlook
“Dictate a note: export started Monday, check the items report.”
Hold fn while you speak, and the words appear as formatted text at the cursor in any app.
Types what you say · Outlook
“Find out whether legacy Outlook for Mac support has ended.”
Lazur runs the research in its own Chrome tabs and returns a summary and a report. Check the claim on Microsoft's support page.
Researches in the background · Outlook
“Remind me to download the export before day 14.”
Lazur adds the reminder to Apple Reminders, so the deadline shows up on your Mac.
Handles the small stuff · Outlook
What ediscovery specialists do in Outlook for Mac
Most of your day in Outlook for Mac is reading, searching, and sorting. You open a mailbox, find the messages that matter, check the sender and dates, and flag what needs a closer look. Outlook is fast for looking. It is not where a defensible collection gets built.
The heavy lifting happens in Microsoft Purview eDiscovery, in a browser. There you create a case, run a search across mailboxes, and export the results as PST files or .msg files. Keep that split in mind, and you will lose less time switching between tools.
Think of Outlook as the place where you test a query. A search in Outlook shows you roughly what a mailbox holds. It does not give you the export package that goes to review. Use Purview for the official search and export, and use Outlook to check your work.

Which Outlook for Mac version to use in 2026
Check your build before you trust any menu path in this guide. The newest build in Microsoft's release notes is Outlook for Mac 16.114.3 (Build 26102720), released October 27, 2026. Microsoft lists that build as quality and performance improvements only. The latest release with feature changes is 16.114, released October 14, 2026.
The legacy version has an end date. Microsoft's Outlook for Mac support page says support for legacy Outlook for Mac ends in October 2026. Support also depends on your Microsoft 365, Office, or Outlook license. That month has passed. The sources do not confirm whether support has ended or been extended, so ask your IT team.
Switching is a single setting. Turn off the Legacy Outlook switch to try the new experience. To go back, choose Help > Revert to Legacy Outlook.
Check these before you switch versions
- Accounts added in one version do not appear in the other. Re-add each account in the version you switch to.
- Check your folders, rules, and reminders after the switch. Do not assume they look the same.
- Write the build number in your case notes. If a reviewer asks how you ran a search, you can answer.
- Test search and sort on a small account before you switch your review mailbox.
Search keywords for ediscovery work in Outlook for Mac
Outlook for Mac search supports Advanced Query Search keywords. Type the keyword, a colon, then the term, with no space after the colon. Keyword searches are not case sensitive, so From:Jerri and from:Jerri return the same results.
The keywords you will use most include From, To, Cc, Bcc, Subject, Body or Content, Sent, Received, Category, HasAttachment, and IsFlagged. Sent and Received accept dates in MM/DD/YYYY format. They also accept relative terms such as last week.
| Keyword | Example | What it does |
|---|---|---|
| From | From:Jerri | Finds messages from that sender |
| Subject | Subject:report | Finds the term in the subject line |
| Sent | Sent:03/15/2026 | Finds messages sent on that date |
| Received | Received:last week | Uses a relative date term |
| HasAttachment | HasAttachment (test first) | Narrows results to messages with attachments |
| IsFlagged | IsFlagged (test first) | Narrows results to flagged messages |
Keywords take a little practice. Once the syntax is familiar, rebuilding a query takes a moment. That matters when a custodian's mail is re-collected or the scope changes, and you need the same search again.
Combining terms with AND, OR, quotes, and wildcards
Microsoft's search page says AND and OR can combine search terms. Its example is From:Jerri AND Subject:report. Parentheses match all of the listed words. Quotation marks match an exact phrase, so use them for names and project codes.
Use a minus sign to exclude a value. Wildcards work only at the end of a term. The page gives set* as the example, so set* matches settle and settings. A wildcard at the start of a term is not supported.
Be careful with Boolean logic in Outlook for Mac. The sources do not agree on how well AND and OR work in this app. Microsoft's page does not say whether the operators must be capital letters, or which app build it covers. Test each combined query first.
A worked example: one sender's mail on one day
Here is a search you can run as a test. It finds one sender's messages on one date. Adjust the names and dates to match your matter. The steps are short, but each one can change the result.
- Click the search box.
- Type From:Jerri AND Sent:03/15/2026 and press Return.
- Count the hits, then open three of them. Confirm the sender and the date are right.
- Open the Filters icon at the end of the search box. Look at what it offers before you widen the query.
- Add or remove one term at a time, and count the hits after each change.
- Copy the final query string into your case notes, with the date you ran it.
The example covers one day. It does not set a range in one step. For a longer window, run one query per day, or run the search in Purview. Purview's guidance says to divide large exports using date ranges or other filters.
Sort the results before you flag anything. Pin the messages you need to revisit with pin an email in Outlook on Mac. Use create a folder in Outlook on Mac for a holding folder, but never as your only copy.
Exports: where Purview takes over from Outlook
Exports belong in Purview. The export options in Microsoft's guidance are Purview portal settings, not Outlook for Mac features. Choose Create PSTs for messages or .msg files. The PST package size can be 1 GB, 2 GB, 5 GB (the default), or 10 GB.
Next, choose how to split the output. If you select Organize data from different locations into separate folders or PSTs, each mailbox exports to its own PST. If you leave it unselected, mailbox content merges into one PST, subject to the size limit you chose.
Pick the split to match your review plan. Separate PSTs keep each custodian's mail apart, which helps when you need to show where an item came from. A merged PST is simpler to load. It can make the source of each item harder to see.
| 10,000 mailboxes | 4 minutes |
|---|---|
| 25,000 mailboxes | 10 minutes |
| 100,000 mailboxes | 25 minutes |
Microsoft's averages. Microsoft gives no SLA for these times. Source: Limits in eDiscovery (Microsoft Learn)

Limits that break exports, with the numbers
Purview caps how fast and how much you can export. The rate limit is 2 GB per hour per mailbox. A single search can export up to 2 TB under standard eDiscovery, or 5 TB under premium. Each export can hold up to 500,000 items.
The indexing limits cause odd results rather than clear errors. Attachments over 150 MB are not parsed. Purview parses only the first 250 attachments per message, and it skips attached images. Each item gets 30 seconds of parsing time, and only the first 2 million characters are indexed. Items that hit a limit are marked partially indexed.
41%
of 101 legal professionals named lack of time as their biggest individual challenge
EDRM, More data, fewer resources (2026)14 days
before a Purview export package expires and its data is deleted
Export search results in eDiscovery (Microsoft Learn)64%
of 2024 eDiscovery task spending went to review, a cost share and not a time share
ComplexDiscovery, 2025 eDiscovery Review UpdatePlan around these limits
- Exports that run longer than seven days are cancelled automatically. Split large jobs by date range or another filter.
- Export packages expire 14 days after creation. After that, the export and its data are deleted and cannot be recovered.
- A PST file larger than 10 GB is split automatically.
- Files restricted by a DLP action cannot be exported. They can still appear in search statistics, so do not read those counts as exported items.
- Export requires a Microsoft 365 Enterprise E3 or E5 license for the eDiscovery user.
- The recommended maximum for a targeted search is 1,000 locations. Tenant-wide search supports up to 500,000.
Exports often fail at the edge of two limits. A large mailbox can hit the hourly rate long before the size limit matters. A mailbox with 10 GB of mail needs about five hours at 2 GB per hour, before any other delay. Plan the schedule around the rate, not only the deadline.
Collection search times and what to plan for
Microsoft's average collection search times are roughly 4 minutes for 10,000 mailboxes, 10 minutes for 25,000, and 25 minutes for 100,000. Microsoft gives no service level agreement for these times. Read them as averages, not promises, and leave room before any production deadline.
Plan the scope with the custodian list open beside you. Confirm that each mailbox is listed. A typo in one address can leave a whole mailbox out of the search, and the result will look normal.
Download and unzip your export without losing time
Purview's download guidance is written for Windows and the Edge browser. The sources do not include Mac-specific guidance. The same checks still apply on a Mac, and they prevent most failed downloads.
- Microsoft recommends the latest Microsoft Edge for downloads. Use it for Purview downloads, even if Safari is your default.
- Allow pop-ups from Microsoft Purview.
- Set automatic downloads to Allow for the Purview site.
- If your firm uses a security tool such as Zscaler, allow the export endpoints through it before the export runs.
- The guidance warns against the built-in Windows zip utility and suggests 7-Zip or WinZip. On a Mac, ask IT which archive tool they approve.
Download inside the 14-day window. Write the expiry date in your case notes. A calendar reminder works well here, and Lazur can set one for you by voice.
Importing a PST into Outlook for Mac
Sometimes a PST arrives from outside, and you need to open it in Outlook. Microsoft's guide covers legacy Outlook for Mac. Choose File > Import, select Outlook for Windows archive files (.pst), locate the file, and import it. The items appear under On My Computer.
The new Outlook is less clear. Microsoft's release notes say Import PST arrived in Outlook for Mac 16.110 on June 16, 2026. The PST import article does not mention the new version. The sources conflict on this point, so test before you depend on it.
Test with a copy, never the original. Import a small PST you made yourself, count the items, and compare the counts. Then move to the real file. Keep the original on a read-only copy.
- Record the original file's size and checksum before you open it.
- Import on a profile or machine you control, not your live review account.
- Count items in the source and in Outlook, then log any gap.
- Keep the import log with the case file, not in your downloads folder.
Reading the items report in a Purview export
A Purview export includes a report of its items. Check the report against the PST contents before you call the export complete. If you only need the report, use the Export items report only option.
Watch long text fields. That option truncates CSV string fields to 255 characters. A long subject line or a long recipient list may be cut off. When a field matters, open the full item in the export, not the CSV.

Mistakes that cost ediscovery specialists time in Outlook
- Putting a space after the colon, so From: Jerri does not work as a keyword.
- Trusting a query you never tested on a message you know.
- Assuming Outlook and Purview return identical results. Purview has its own limits and indexing rules.
- Starting an export that runs past seven days, then losing the work when it is cancelled.
- Forgetting the 14-day expiry and trying to download a package after it is deleted.
- Using a wildcard at the start of a term. Only the suffix form works.
- Downloading through a proxy or security tool that blocks the export endpoints.
What the survey and cost data say about your time
Time is the top problem for many people in this field, according to one survey. In an EDRM survey of 101 legal professionals, 41% named lack of time as their biggest individual challenge. About 70% of respondents work at law firms or legal services organizations. The sample is small, so treat it as a signal, not a benchmark.
The same survey found that 58% named document management, review, and reduction as a firm's biggest eDiscovery challenge. 34% named data collection, and 32% named budget limitations. The sources do not say whether answers could be chosen more than once, so the percentages may add up to more than 100.
A separate cost report from ComplexDiscovery puts review at 64% of 2024 eDiscovery task spending. Collection rose to 16%, and processing held at 20%. These are cost shares, not time shares, so do not use them to estimate hours.
For your Outlook work, put effort into query design and export planning. Those two choices decide how much mail reaches review, and how often you must rerun an export.
Shared mailboxes and Online Archive in Outlook for Mac
You may need to search mailboxes you do not own. Microsoft's support page says Outlook for Mac supports shared mailboxes for Exchange On-Premises. Hybrid shared mailboxes are listed as coming later. Ask your admin which type your firm uses. Setup steps are in add a shared mailbox in Outlook on Mac.
Online Archive appears in the Outlook sidebar. Older mail can sit there, outside the main folder list. Search it on purpose. If you search only the main folders, your results can look thin, and the gap is easy to miss.
What Lazur can and cannot do in Outlook and Purview
Lazur is a voice assistant for the Mac. Hold ⌥ ⌘, Option and Command together, to ask about anything on screen. Lazur answers out loud. Ask where something is, and it draws a circle and a label around it on your screen.
Ask how to do something, and Lazur guides you one click at a time. It waits for each click before it moves on. It does not click for you, and it does not operate Outlook, Purview, or any other app. Every click in your review stays yours.
Hold fn to dictate clean, formatted text at the cursor in any app. Dictation is included, so you can use it for case notes. Check every line before it goes into a file, because a speech tool can mishear a name or a date.
Research jobs run in Lazur's own Chrome tabs, through the Lazur for Chrome extension. They return a summary and a report. Use them to gather vendor documentation, then verify the key claims on the source page.
Lazur listens and looks at the screen only while you hold the shortcut. Audio and the screenshot go to AI providers to answer you, and they are not stored. Content is never used to train AI models. Still, check your firm's policy before you point any AI tool at privileged or client material.
Lazur runs on macOS, on Apple silicon and Intel Macs. Windows is planned, not available. Lazur is not a plugin or add-in for Outlook or any other app, and it has no partnership with any app maker. Check the pricing page for plan details.
Where Lazur fits in an Outlook review day
A review day has three parts. You search, you check, and you write up what you did. Lazur helps most at the start and at the end. It can explain a keyword, point at a control, or draft the status note. The export itself stays in Purview.
Next steps for this week
- Confirm your Outlook build, and whether you run the legacy or new version.
- Write down your search queries, and test each one on a message you know.
- Check your Purview export settings: PST size, split option, and the 14-day expiry.
- Split any export that might run past seven days into date-range batches.
- Test a PST import on a copy before the real file arrives.
- Set a reminder for each download deadline, then check the items report when the export finishes.
When you want a voice assistant for the steps above, download Lazur. It runs on your Mac, and you can start with the trial.
Questions people ask
Can I run ediscovery exports from Outlook for Mac?
The export settings in Microsoft's guidance belong to the Microsoft Purview eDiscovery portal, which runs in a browser. Outlook for Mac is where you search, sort, and check messages. Run the official export in Purview, then check the results in Outlook.
Which Outlook for Mac version should I use in 2026?
Use the version your IT team supports, and record its build number. The newest build in Microsoft's release notes is 16.114.3, released October 27, 2026. Legacy Outlook support was set to end in October 2026, and the sources do not confirm the final status.
Can Outlook for Mac import a PST file?
Microsoft's release notes say Import PST arrived in Outlook for Mac 16.110 on June 16, 2026. The PST import article covers legacy Outlook for Mac. Test a copy first, because the sources do not settle how the new Outlook handles PST files.
How long do Purview export downloads stay available?
Export packages expire 14 days after creation. After that, the export and its data are deleted and cannot be recovered. Download inside that window, and keep a copy of the items report with it.
Why did my Purview export get cancelled?
An export that runs for more than seven days without finishing is cancelled automatically. Split large jobs into smaller batches by date range or another filter. Purview also limits export rate to 2 GB per hour per mailbox, so large mailboxes take longer.
Can Lazur run the search or the export for me?
No. Lazur points, explains, guides, drafts, dictates, and runs research in its own Chrome tabs. It does not click buttons or operate Outlook or Purview for you. You make each click yourself.
Is it safe to use Lazur with privileged material?
Lazur listens and looks at the screen only while you hold the shortcut. Audio and screenshots go to AI providers to answer you, and they are not stored. Check your firm's policy before you share privileged or client content with any AI tool.
Do the search operators work the same in every Outlook version?
The sources do not confirm that. Microsoft's search page says AND and OR can combine terms, but it does not say which app build it covers. Test each query on the build you actually use.
Sources
- Release notes for Office for Mac · Microsoft Learn · checked 2026-11-08
- Outlook for Mac · Microsoft Support · checked 2026-11-08
- Import a .pst file into legacy Outlook for Mac from Outlook for Windows · Microsoft Support · checked 2026-11-08
- Search in Outlook for Mac · Microsoft Support · checked 2026-11-08
- Export search results in eDiscovery · Microsoft Learn · checked 2026-11-08
- Limits in eDiscovery · Microsoft Learn · checked 2026-11-08
- More data, fewer resources: What 100+ legal professionals say is holding ediscovery back in 2026 · EDRM · checked 2026-11-08
- 2025 eDiscovery Review Update: Tasks, Cost Data, and Spending Patterns · ComplexDiscovery · checked 2026-11-08
Try Lazur free for 3 days
Hold a key and ask. Lazur sees your screen, points at the button and talks you through it, in any Mac app. No credit card.