Skip to content

Searchable content

The table below provides a list of searchable fields and properties for each workload supported by Afi.

WorkloadSearchable data
Gmail and Exchange mail Email subject
Email body
From
To/CC/BCC
Received time
Attachment names
Google Drive and OneDrive File name
File modification time
File ID (for Google Drive)
SharePoint Subsite name
Library/list name
File name
File modification time
Google and Exchange calendar events Event subject and body
Event attendees
Attachment names
Google and Exchange contacts Contact name
Contact emails
Contact phones
Contact fields and notes
Exchange tasks Task title and notes
Attachment names
Team Chats Message body
From
To
Received time
Attachment names
Team Channels Message body
From
To
Received time
Attachment names
Microsoft Planner Plan name

Task title and description
Task creation time
Task creator
Task assignees
Task checklist items
Attachment names
Google Chats Message body
From
To
Received time
Attachment names
Entra ID (Azure Active Directory) User name and email
User phone
User company
User department
User job title
User location

Group name and email
Group description

Role name and description

Conditional access policy name and description
Authentication context name and description
Authentication strength name and description
Named location name and description

Device name and description
Compliance policy name and description
Configuration policy name and description

Audit event type
Audit event time
Audit event initiator
Audit event category
Audit event operation
Audit event target and target type

Administrative unit name
Administrative unit description
Google Directory User name and email
User phone
User company
User department
User job title
User location

Group name and email
Group description

Organizational unit name
Organizational unit description
Power Platform Power BI report name
Power BI report modification time

Power BI dashboard name

Power BI dataflow name

Power Apps application name
Power Apps application modification time
Power Apps application owner name
Power Apps application owner email

Power Automate flow name
Power Automate flow modification time
Power Automate flow owner name
Power Automate flow owner email

Power Platform DLP policy name
Power Platform DLP policy modification time