Logo
v1.14.2
  • User Guides
    • Get started with the Code42 command-line interface (CLI)
    • Configure a profile
    • Ingest data into a SIEM
    • Manage legal hold users
    • Clean up your environment by deactivating devices
    • Write custom extension scripts using the Code42 CLI and Py42
    • Manage users
    • Configure trusted activities
    • Configure alert rules
    • Add and manage cases
    • Perform bulk actions
    • Manage watchlist members
    • (DEPRECATED) Manage detection list users
  • Commands
    • Alert Rules
    • Alerts
    • Audit Logs
    • Cases
    • Devices
    • Legal Hold
    • Profile
    • Security Data
    • Trusted Activities
    • Users
    • Watchlists
    • (DEPRECATED) Departing Employee
    • (DEPRECATED) High Risk Employee
code42cli
  • »
  • Commands »
  • legal-hold
  • Edit on GitHub

legal-hold

Add and remove custodians from legal hold matters.

legal-hold [OPTIONS] COMMAND [ARGS]...

add-user

Add a custodian to a legal hold matter.

legal-hold add-user [OPTIONS]

Options

-m, --matter-id <matter_id>

Required Identification number of the legal hold matter the custodian will be added to.

-u, --username <username>

Required The username of the custodian to add to the matter.

-d, --debug

Turn on debug logging.

--totp <totp>

TOTP token for multi-factor authentication.

--profile <profile>

The name of the Code42 CLI profile to use when executing this command.

bulk

Tools for executing bulk legal hold actions.

legal-hold bulk [OPTIONS] COMMAND [ARGS]...

add

Bulk add custodians to legal hold matters using a CSV file. CSV file format: matter_id,username

legal-hold bulk add [OPTIONS] CSV_FILE

Options

-d, --debug

Turn on debug logging.

--totp <totp>

TOTP token for multi-factor authentication.

--profile <profile>

The name of the Code42 CLI profile to use when executing this command.

Arguments

CSV_FILE

Required argument

generate-template

Generate the CSV template needed for bulk adding/removing users.

legal-hold bulk generate-template [OPTIONS] [add|remove]

Options

-p, --path <path>

Write template file to specific file path/name.

Arguments

CMD

Required argument

remove

Bulk release custodians from legal hold matters using a CSV file. CSV file format: matter_id,username

legal-hold bulk remove [OPTIONS] CSV_FILE

Options

-d, --debug

Turn on debug logging.

--totp <totp>

TOTP token for multi-factor authentication.

--profile <profile>

The name of the Code42 CLI profile to use when executing this command.

Arguments

CSV_FILE

Required argument

list

Fetch existing legal hold matters.

legal-hold list [OPTIONS]

Options

-f, --format <format>

The output format of the result. Defaults to table format.

Options

TABLE | CSV | JSON | RAW-JSON

-d, --debug

Turn on debug logging.

--totp <totp>

TOTP token for multi-factor authentication.

--profile <profile>

The name of the Code42 CLI profile to use when executing this command.

remove-user

Release a custodian from a legal hold matter.

legal-hold remove-user [OPTIONS]

Options

-m, --matter-id <matter_id>

Required Identification number of the legal hold matter the custodian will be removed from.

-u, --username <username>

Required The username of the custodian to add to the matter.

-d, --debug

Turn on debug logging.

--totp <totp>

TOTP token for multi-factor authentication.

--profile <profile>

The name of the Code42 CLI profile to use when executing this command.

search-events

Tools for getting legal hold event data.

legal-hold search-events [OPTIONS]

Options

-m, --matter-id <matter_id>

Filter results by legal hold UID.

--event-type <event_type>

Filter results by event types.

Options

MembershipCreated | MembershipReactivated | MembershipDeactivated | HoldCreated | HoldDeactivated | HoldReactivated | Restore

--begin <begin>

The beginning of the date range in which to look for legal hold events. Accepts a date/time in yyyy-MM-dd (UTC) or yyyy-MM-dd HH:MM:SS (UTC+24-hr time) format where the ‘time’ portion of the string can be partial (e.g. ‘2020-01-01 12’ or ‘2020-01-01 01:15’) or a ‘short time’ value representing days (30d), hours (24h) or minutes (15m) from the current time.

--end <end>

The end of the date range in which to look for legal hold events, argument format options are the same as –begin.

-f, --format <format>

The output format of the result. Defaults to table format.

Options

TABLE | CSV | JSON | RAW-JSON

-d, --debug

Turn on debug logging.

--totp <totp>

TOTP token for multi-factor authentication.

--profile <profile>

The name of the Code42 CLI profile to use when executing this command.

show

Display details of a given legal hold matter.

legal-hold show [OPTIONS] MATTER_ID

Options

--include-inactive

View all custodians associated with the legal hold matter, including inactive custodians.

--include-policy

View details of the preservation policy associated with the legal hold matter.

-d, --debug

Turn on debug logging.

--totp <totp>

TOTP token for multi-factor authentication.

--profile <profile>

The name of the Code42 CLI profile to use when executing this command.

Arguments

MATTER_ID

Required argument

Previous Next

© Copyright 2022, Code42 Software. Revision ddb86a78.

Built with Sphinx using a theme provided by Read the Docs.
Read the Docs v: v1.14.2
Versions
latest
stable
v1.14.2
v1.14.1
v1.14.0
v1.13.0
v1.12.1
v1.12.0
v1.11.1
v1.11.0
v1.10.0
v1.9.0
v1.8.1
v1.8.0
v1.7.0
v1.6.1
v1.6.0
v1.5.1
v1.5.0
v1.4.2
v1.4.1
v1.4.0
v1.3.1
v1.3.0
v1.2.0
v1.1.0
v1.0.0
feature-extension_scripts
Downloads
On Read the Docs
Project Home
Builds