Search Through Conversations in Cisco Spark

Document created by Cisco Documentation Team on Aug 18, 2017
Version 1Show Document
  • View in full screen mode
 

Search for Sensitive Information in the Cisco Spark App

 

As a compliance officer, you can use Cisco Spark Control Hub to search through any conversation in the Cisco Spark app. You can look for a specific person in your company, find any content they've shared, and then generate a report of your findings. You can also look through a specific space for information.

  

Here are some important details about search options and reports. Familiarize yourself with this information so that you understand the type of information you can look for, how much information you can pull into a report, and how long reports are available.

  
  •  

    Search options—You can search through content (space IDs, keywords, and email addresses). You can even search through content that's been deleted. As for group spaces, you can only search group spaces that have been created by someone in your company. Standard customers can search through content posted within the last 90 days. Pro Pack customers can search through content that's older than 90 days.

      


    Note


     

    At this time, you can't search through whiteboard content.

      
      
  •  

    Storage limit of reports—Depends on how many Cisco Spark users you have. Your company is allotted 5 GB per user. For example, if you have 10,000 users, the app can store up to 50,000 GB of activity reports. After you reach this limit, you can't download any more reports.

      

  •  

    Reports—You can download reports that are up to 10 days old. Reports that are older than 10 days are considered expired and can no longer be accessed.

          

  

Compliance Officer Role

 

Full administrators can assign the compliance officer role to any person within their organization if, for example, your company requires details for legal proceedings. As a compliance officer, you can access the Cisco Spark eDiscovery Search and Extraction tool from Cisco Spark Control Hub. You can generate reports from here that contain all of the conversations held in Cisco Spark spaces and any files shared within those spaces.

      

You can search Cisco Spark for space IDs, keywords, shared files, and any email address used in your organization. You can generate a report and then download it as a JSON file.

  

JSON File Fields and Descriptions

 

The following tables present the fields that you can refer to in the JSON files that you download. These fields provide detailed information that can help you find the information you're looking for in Cisco Spark.

  

Actor Fields and Descriptions

   

An actor represents the person or entity that initiated the event or action.

   
                                                          
 

Field

  
 

Description

  
 

actor/id

  
 

Unique ID of the actor - could be user ID or email address.

  
 

actor/objectType

  
 

Type of object

  
 

actor/url

  
 

Object URL

  
 

actor/published

  
 

Time when this object was published.

  
 

actor/displayName

  
 

Display name of the person.

  
 

actor/summary

  
 

Brief description of the object.

  
 

actor/mentions

  
 

Collection of people that were mentioned in this activity.

  
 

actor/orgId

  
 

ID of the actor's organization.

  
 

actor/emailAddress

  
 

Email address of the actor.

  
 

actor/entryUUID

  
 

User ID of the actor.

  
 

actor/type

  
 

Type of actor. For example, PERSON, MACHINE, ANONYMOUS.

  
 

actor/terminated

  
 

Indicates if the actor has left or has been deleted from the organization.

  
 

actor/fullName

  
 

Full name of the actor.

  
 

actor/email

  
 

Primary email address of the actor.

  
 

actor/moderator

  
 

Indicates if the actor is the moderator of the target space.

  
 

actor/robot

  
 

Indicates if the actor is ROBOT type.

  
 

actor/signedUp

  
 

Indicates if the actor has signed up.

  
 

actor/person

  
 

Indicates if the object is of Type "imageURI".

  
  

Object Fields and Descriptions

   

An object is the person or conversation or entity that is being operated on. For example, someone sends a message, the object will be of type comment. If someone adds Bob to a space, the object will of type person. If someone shares a file, the object will be of type file.

   
                                                 
 

Field

  
 

Description

  
 

object/id

  
 

Unique identifier of object.

  
 

object/objectType

  
 

Type of object

  
 

object/url

  
 

object URL

  
 

object/published

  
 

Time when this object was published.

  
 

object/displayName

  
 

Display name of object.

  
 

object/summary

  
 

Brief description of the object.

  
 

object/message

  
 

Plain text message posted by the actor in the target conversation.

  
 

object/conversation

  
 

Indicates if the object is of Type "conversation".

  
 

object/team

  
 

Indicates if the object is of Type "team".

  
 

object/comment

  
 

Indicates if the object is of Type "comment".

  
 

object/event

  
 

Indicates if the object is of Type "event".

  
 

object/locus

  
 

Indicates if the object is of Type "locus" - would be true in case of meetings.

  
 

object/person

  
 

Indicates if the object is of Type "person".

  
 

object/activity

  
 

Indicates if the object is an activity.

  
 

object/file

  
 

Indicates if the object is a file.

  
  

Target Fields and Descriptions

   

A target is the place or destination the action is directed towards. Target is always conversation (for example, a conversation in a space).

   
                                                                                     
 

Field

  
 

Description

  
 

target/id

  
 

Unique identifier of the target (conversation and space).

  
 

target/objectType

  
 

Type of object.

  
 

target/url

  
 

Object URL that can be used to obtain full JSON details for the object.

  
 

target/published

  
 

Optional time when this object was published/created.

  
 

target/displayName

  
 

Display name of the conversation or space.

  
 

target/summary

  
 

Brief description of the object.

  
 

target/mentions

  
 

Collection of people that are mentioned in this activity.

  
 

target/memberships

  
 

Membership information of the space.

  
 

target/defaultActivityEncryptKeyUrl

  
 

Encryption key URL that's used to encrypt or decrypt the space.

  
 

target/conversationWebUrl

  
 

URL that points to the space in the Cisco Spark for Web.

  
 

target/creatorUUID

  
 

Unique identifier of the person who created this space.

  
 

target/creatorEmail

  
 

Email address of the creator of space.

  
 

target/team

  
 

Team metadata if the space is a team space.

  
 

target/monitorBots

  
 

List of monitor bots present in the space, if any.

  
 

target/avatar

  
 

Profile picture of the target space.

  
 

target/conversationCreationDetalisUrl

  
 

URL that points to the space in Cisco Spark for Web.

  
 

target/custodianOrg

  
 

Organization that owns the space.

  
 

target/custodianOrgs

  
 

List of owner organizations.

  
 

target/userPreferences

  
 

Related to user's status (active, inactive).

  
 

target/organizationPolicies

  
 

Indicates the organization's policies.

  
 

target/encryptionKeyConvTitleUrl

  
 

Encryption key URL that's used to encrypt or decrypt the title of the space.

  
 

target/oneOnOne

  
 

Indicates if the space is a conversation with just one other person.

  
 

target/teamConversation

  
 

Indicates if the space is a team space.

  
 

target/teamGuestMember

  
 

Guest member information.

  
 

target/open

  
 

Indicates if the space is open for anyone within the team to join.

  
 

target/locked

  
 

Indicates if the space is locked.

  
 

target/conversation

  
 

Indicates if the target is a conversation.

  
  

Verb Fields and Descriptions

   

A verb is the type of action being performed. For messages, the action is usually post but could be other things such as delete (when someone deletes a message).

   
                                                                                                                                                    
 

Field

  
 

Description

  
 

locusSessionSummary

  
 

Summary of call and meeting metadata such as startTime or duration.

  
 

addTeamConversation

  
 

A space was added to a team.

  
 

removeTeamConversation

  
 

A space was removed from a team.

  
 

postImageURI

  
 

Indicates that a URL of an image was posted.

  
 

postOrAddFile

  
 

Content was shared in a space.

  
 

acknowledgeActivity

  
 

An activity was acknowledged in a space.

  
 

muteConversation

  
 

A space was muted so that notifications weren't received.

  
 

assignAvatar

  
 

A profile picture was added.

  
 

unassignAvatar

  
 

A profile picture was removed.

  
 

leaveConversation

  
 

Someone left a space.

  
 

searchableActivity

  
 

An activity that can be searched such as post message or share content activity.

  
 

unMuteConversation

  
 

A space was unmuted so that notifications were received.

  
 

favoriteConversation

  
 

Mark a space as favorite.

  
 

unFavoriteConversation

  
 

Unmark a space as favorite.

  
 

hideConversation

  
 

Hide a space.

  
 

unHideConversation

  
 

Unhide a space.

  
 

unArchiveConversation

  
 

Unarchive a space.

  
 

startLocus

  
 

Start a call.

  
 

cancelLocus

  
 

Cancel a call.

  
 

rejectLocus

  
 

Reject a call.

  
 

terminateLocus

  
 

End a call.

  
 

joinLocus

  
 

Join a call.

  
 

leaveLocus

  
 

Leave a call.

  
 

shareImages

  
 

Share content or images.

  
 

shareVideos

  
 

Share videos.

  
 

shareDocuments

  
 

Share files.

  
 

scheduleCalendarEvent

  
 

Schedule a meeting using calendar.

  
 

updateCalendarEvent

  
 

Update a meeting using calendar.

  
 

deleteCalendarEvent

  
 

Delete a meeting using calendar.

  
 

repostActivity

  
 

An activity was reposted.

  
 

postOrAddComment

  
 

A message was posted into a space.

  
 

deleteActivity

  
 

An activity, such as a message or file, was deleted.

  
 

shareContent

  
 

Content (such as image or files) was shared.

  
 

addParticipant

  
 

A participant was added to a space.

  
 

assignModerator

  
 

An existing participant was assigned as the moderator of that space.

  
 

unassignModerator

  
 

A space moderator was unassigned.

  
 

createConversation

  
 

A space was created.

  
 

lockRoom

  
 

A space was locked and the person who locked it becomes the space moderator.

  
 

unlockRoom

  
 

A space was unlocked. There are no moderators of that space.

  
 

updateTitleActivity

  
 

The title of a space was updated.

  
 

archiveConversation

  
 

A space was archived.

  
 

conversationId

  
 

Unique identifier of a space.

  
 

conversation

  
 

TRUE of the space is a regular space.

  
 

team

  
 

TRUE of space is a team space.

  
 

comment

  
 

The actual message posted in a space.

  
 

person

  
 

Participant in a space.

  
 

activity

  
 

Type of action taken by a participant in a space.

  
 

file

  
 

Content shared in a space.

  
  

Miscellaneous Fields and Descriptions

   

The table below includes fields and descriptions that don't fit into the categories above.

   
                         
 

Field

  
 

Description

  
 

id

  
 

Unique identifier of the object.

  
 

objectType

  
 

Type of object.

  
 

url

  
 

Object URL that can be used to obtain full JSON details for the object.

  
 

published

  
 

When this activity object was published.

  
 

displayName

  
 

Display name of the activity object (should not include any HTML markup).

  
 

verb

  
 

Verb of the activity. For example, post (message), share (content), add (participant), create (conversation).

  
 

encryptionKeyUrl

  
 

The encryption key URL that's used to encrypt or decrypt this activity.

  
  
 

Attachments

    Outcomes