Enterprise Vault Discovery.cloud User Guide

To perform a new search for email content (Investigations tab)

1. Select the Investigations tab, and then select the node where you want to perform the new search:

   • To search your own mailbox select My Mailbox > Mailbox, or select My Mailbox > Saved Searches > New Search.

   • To search one or more of your managed accounts select Managed Accounts > Saved Searches > New Search.

   • Or to search a single managed account, select Managed Accounts > Accounts and click the required account.

   The following figure shows an example of the Basic Search box:

   

   Perform step 2 for a Basic Search, step 3 for an Advanced Search, or step 4 for an Advanced Search.

2. To perform a Basic Search:

   • Type a search term or phrase in the search box. You can enter up to 1000 characters. The search is not case-sensitive. The search supports phrase search, Boolean operators, proximity search, and wildcard search.

     See Search syntax for Basic Search and Advanced Search.

   • Click Search to start the search.

   • To filter the search results by date, click the single-arrow drop-down icon that is adjacent to the Basic Search box, and then select a date from the displayed calendar, or select a date option.

   
3. To perform an Advanced Search click the Expand icon in the Search bar:
   

   The Advanced Search options then appear. The Search Custodian(s) option appears only if you are searching the content of multiple accounts.

   

   If you are searching content of multiple archive accounts, the Search Custodian(s) option lets you choose the accounts to include. To search all of the accounts select All. To search specific accounts, click Selected and then click Add/Remove Custodian(s) to select the required accounts.

   Specify what to search for:

   • To define multiple search clauses, click the + icon and complete a new row for each clause.

   • Searches are not case-sensitive. The search supports phrase search, Boolean operators, proximity search, and wildcard search.

     See Search syntax for Basic Search and Advanced Search.

   The following table describes the message attributes you can search for, and the search options for each.

   Entire Message	Contains / Doesn't Contain
   Subject	Contains / Doesn't Contain
   Body	Contains / Doesn't Contain
   From	Contains / Doesn't Contain Note: This option produces search results from the From field.
   To	Contains / Doesn't Contain Note: This option produces search results from the To, BCC, and CC fields.
   Has Attachment	Yes / No
   Attachment Name	Contains / Doesn't Contain
   Attachment Type	Contains / Doesn't Contain See Searchable attachment types.
   Classified As	Contains / Doesn't Contain Note: This option is available if the Veritas Information Classifier service is enabled for your company. Select a classification tag from the drop-down list. The list shows all the classification tags that have been applied to your company's messages in Enterprise Vault.cloud. To see a tooltip with a classification tag's description, select the classification tag from the drop-down list and then point to the classification tag.
   Date Sent (AND)	Is Equal To / Before / Before (Incl.) / After / After (Incl.)
   From / To	Contains / Doesn't Contain Note: This option produces search results from the From and To fields.
   Is Hidden	Yes / No
   IP Header	Contains / Doesn't Contain

   Choose from Match All or Match Any to indicate whether all of the defined clauses must be matched, or whether the search results can include any matched clause.

   Then click Search to start the Advanced Search.

   Note:

   The results of an Advanced Search include a Relevance column. The length of the bar in this column represents how closely the email matches the search criteria, relevant to the other emails in the results.

4. To perform a Query Search click the Expand icon in the Search bar.

   The Advanced and Query Search options then appear.

   • In the text box, write your required Query Search using Lucene Syntax. See https://lucene.apache.org/core/2_9_4/queryparsersyntax.html.

     See Search examples and tips.

     Note:

     Date Time format: yyyy-MM-ddTHH:mm:ss (2019-05-30T20:53:30).

   • Click Search to start the Query Search.

5. To save the Basic, Advanced, or Query Search click Save Search and complete the Save Search dialog.

   See Saving a search of accounts (Investigations tab).