Questions tagged [google-vault-api]

Google Vault is the eDiscovery and compliance solution for G Suite, allowing customers to retain, hold, search, and export their data.

What is Google Vault?

Google Vault lets you retain, hold, search, and export data to support your organization’s archiving and eDiscovery needs. Vault supports:

  • Email messages
  • Chats in classic Hangouts with history turned on and Google Talk chats that are on the record
  • Google Groups
  • Files in Google Drive and Team Drives
  • Conversations in Hangouts Chat

Vault is entirely web-based, so there's no need to install or maintain any software. Vault is included with G Suite Enterprise, Business, Education, or Drive Enterprise edition.

Vault API

The Vault API lets you manage:

Matters—each matter is a container for all of the data related to a specific case or investigation. A matter includes:

  • Saved search queries
  • A list of accounts with data on hold
  • A list of the accounts that can access the matter
  • Export sets for the matter
  • An audit trail for the matter
  • Holds—allow you to preserve messages and files indefinitely to meet legal or preservation obligations. If a user who's subject to a hold deletes data, it's removed from the user's view, but the data is preserved in Vault. As long as the hold is in place, you can search and export that data.
  • Exports—create, list, download, and delete Vault exports.

Google Vault API Guides

29 questions
3
votes
0 answers

Google vault Export API not working with Cloud storage API

Google vault provide an option to export the search via API as per the documentation. Reg.: https://gsuiteupdates.googleblog.com/2018/08/google-vault-export-api.html But the Cloud storage API is not pulling the export. I am getting below error. { …
Samraj
  • 83
  • 2
  • 11
2
votes
0 answers

GoogleCredentials.getApplicationDefault() returning unexpected results

I am using a Google cloud function and can't get the default service account to work properly. The service account works fine if I pass in a JSON credentials file. However, if I set the same service account to be the default account for the…
2
votes
3 answers

Is there any way to download exported data from a Google Vault Export?

From documentation on https://developers.google.com/vault/guides/exports, I've been able to create, list, and retrieve exports, but I haven't found any way to download the exported data associated with a specific export. Is there any way to download…
NickCSE
  • 305
  • 1
  • 4
  • 14
1
vote
1 answer

Try to download export from google vault, get 403 error using service account

From documentation on https://developers.google.com/vault/guides/exports, I've been able to create, list, and retrieve exports, but I haven't found any way to download the exported data associated with a specific export. Is there any way to download…
1
vote
0 answers

Authenticating to Google Vault API -- getting 400 response with message: "The user does not belong to a G Suite customer."

I'm trying to do a simple query from the Google Vault API using JSON credentials provided from the Google API console for a service account. I'm getting a 400 response (Invalid Request / Invalid Argument) with the message: The user does not belong…
1
vote
1 answer

Get items count and items size of a particular account under hold in G-Suit

I am G-Suit admin user having google vault privileges. I am trying to get items count and items size of a particular account placed under hold. Could you please suggest an API endpoint to retrieve items count and items size.
Admin User
  • 13
  • 3
1
vote
1 answer

About the vault's audit log

I would like to get the audit logs for the Vault using the API, in order to get the audit logs in the API and monitor the logs in the SIEM. I followed various links, but did not get any useful…
Ryo Shindo
  • 11
  • 1
1
vote
1 answer

GSuite Vault API: Any way to get a list of users on hold programmatically?

Currently, the Google Vault API does not provide a way to get a report of all users in a G-Suite tenant or domain who are on hold in one or more matters. This information is currently available only via the admin interface for Google Vault under…
tfrancois
  • 175
  • 10
1
vote
3 answers

What is the rate limit on Google Vault Api?

I'm attempting to create an export request for all my users in my organization with Google Vault API in python I have tried slowing my API requests with time.sleep(x). I have tried modifying the script to do one account at a time, with manual…
Scott
  • 11
  • 2
0
votes
0 answers

Using The New Google Vault CSV Metadata File To Correlate Metadata With Message In MBOX Export

We're trying to line up the new CSV metadata file with emails within the MBOX file. Back when it was in XML format, there was a field named 'mboxfromline' that we were able to use to line up the entries in the XML to the emails in the MBOX…
0
votes
0 answers

Transient error. Retry issue when calling GVault Create Hold API

We use the GVault Hold API to create holds in GVault on behalf of our customers using the API defined here https://developers.google.com/vault/reference/rest/v1/matters.holds/create, via the Google.Apis.Vault.v1 Nuget package for .NET (version…
Jamie Nordmeyer
  • 565
  • 1
  • 7
  • 14
0
votes
0 answers

400 Bad Request "Emails do not exist" For Valid emails on Matters.Holds.AddHeldAccounts() request

We are using the Google Vault Service via the Vault API SDK for .NET. Our application is attempting to create a Vault hold by making the following request via the API: _vaultService.Matters.Holds.AddHeldAccounts(request, matterId,…
0
votes
1 answer

Vault Drive export using Search Term "in:trash AND owner:me". owner:me behaviour correct?

We have found a strange edge case and I would like some advice as to how "owner:me" works with the Vault API. Vault retention is turned on. User joebloggs@domain.com has had a lot of drive files and he deleted them 6 months ago. The user was then…
Matt
  • 389
  • 1
  • 8
  • 15
0
votes
0 answers

Google Vault API 400 "Users are not licensed" Error when adding accounts to a Hold

When interacting with the Google Vault API and specifically updating or creating Holds with accounts, I started getting a 400 Error with the message: "Users are not licensed". I have seen a similar error, specifically around Google Voice ("Users are…
0
votes
1 answer

can't download blob from Google Vault API export

I can't get this to work either. In the Google API example documentation, it states this, see below. I am able to authenticate using a storage account, and access the Bucket and see the blobs, but if I use any kind of a blob method, e.g.,…
1
2