Veritas Advanced eDiscovery User Guide

To create a new search

1. Select the Investigations tab, and then select the node where you want to perform the new search:

   • To search your own mailbox, select My Mailbox > Mailbox, or select My Mailbox > New Search.

   • To search one or more of your managed accounts, select Managed Accounts > New Search.

   • To search a single managed account, select Managed Accounts > Accounts, and click the required account.

   The following figure shows a sample Search page:

   

   Perform step 2 for an Advanced Search, or step 3 for a Query Search.

2. To perform an Advanced Search, do the following:

   • Select the Advanced Search tab.

   • Select the custodian archives you want to search.

     • To search archives of all of the custodians that are associated with the case, select All.

     • To search archives of the particular custodians, select Custom. Click Manage to search for, add, and remove the custodians. Click Update to complete the custodian selection.

   • Expand the Custom Header option, and specify the search criteria based on the custom headers.

     

     Note:

     The Custom Header option does not appear if there is no entry for a custom header for a particular group or tenant in database. Custom header does not work independently. You need to use the filter criteria to search the required items.

     • Click + to add new search clauses.

     • Click - to remove search clauses that are not required.

     • In the first column, select the required header you want to search for. Based on the data type you have selected, the operator changes.

       For example, if you have selected the receiver date in header, the operator values can be Between, Before inclusive and After inclusive. For a numeric or integer header value, the operator values can be Is equal to, Less than, and Greater than. If you have selected a string value in header, then the operator will be Contains.

     • In the second column, select the available operator.

     • In the third column, specify the text, phrase, or date that you want to search for.

   • Expand the Filters option, and specify the search criteria by using the following options.

     • Select All to match all conditions you have provided.

     • Select Any to match any of the conditions you have provided.

     • Click + to add new search clauses, and complete a new row for each clause.

     • Click - to remove search clauses that are not required.

     • Searches are not case-sensitive. The search supports phrase search, Boolean operators, proximity search, and wildcard search.

       See Search syntax for Advanced Search.

   • Search for and select the message attributes you want to search. Refer to the table below:

     Entire Message	Contains / Doesn't Contain
     Subject	Contains / Doesn't Contain
     Body	Contains / Doesn't Contain
     From	Contains / Doesn't Contain Note: Produces search results from the From field.
     To	Contains / Doesn't Contain Note: Produces search results from the To, BCC, and CC fields.
     Has Attachment	Yes / No
     Attachment Name	Contains / Doesn't Contain
     Attachment Type	Contains / Doesn't Contain See Searchable attachment types.
     Classified As	Contains / Doesn't Contain Note: This option is available if the Veritas Information Classifier service is enabled for your company. Select a classification tag from the drop-down list. The list shows all the classification tags that have been applied to your company's messages in Enterprise Vault.cloud. To see a tooltip with a classification tag's description, select the classification tag from the drop-down list and then point to the classification tag.
     Date Sent (AND)	Is Equal To / Before / Before (Incl.) / After / After (Incl.)
     From / To	Contains / Doesn't Contain Note: This option produces search results from the From and To fields.
     Inbound Message (AND)	Yes / No
     Outbound Message (AND)	Yes / No
     Is Hidden	Yes / No
     IP Header	Contains / Doesn't Contain
     Sentiment Score	Classifies and displays the records based on their sentiment score.

3. To perform a Query Search, do the following:

   • Select the Query Search tab.

   • Select the custodian archives you want to search.

     • To search archives of all of the custodians that are associated with the case, select All.

     • To search archives of the particular custodians, select Custom. Click Manage to search for, add, and remove the custodians. Click Update to complete the custodian selection.

   • Specify the search query by providing keywords.

4. Click Search.

   Note:

   The results of an Advanced Search include a Relevance column. The length of the bar in this column represents how closely the item matches the search criteria, relevant to the other items in the results.

5. Click Save Search.

   See Saving searches in Review sets and Research sets.