Enterprise Vault Advanced eDiscovery User Guide
- About Enterprise Vault Advanced eDiscovery
- Getting started with Advanced eDiscovery
- Advanced eDiscovery roles
- Investigations
- About Investigations
- About the Managed Accounts node
- Creating a label
- Performing a new search of accounts (Investigations tab)
- Saving a search of accounts (Investigations tab)
- Viewing or modifying a saved search (Investigations tab)
- Generating and exporting printable reports for searches (Investigations tab)
- Deleting saved searches (Investigations tab)
- Working with emails in the Investigations tab
- Hiding and unhiding emails
- Deleting emails permanently
- About the Mail Reassignment node
- Reassigning emails
- Viewing email reassignment status
- Canceling the email reassignment activity
- Generating a Mail Reassignment status report
- Sending notifications to the mail reassignment batch initiator
- About Collaboration
- Searching Collaboration messages during investigation
- Applying tags to Collaboration messages during investigation
- Case management
- About Targeted Collections
- Configuring Targeted Collection for Microsoft Teams
- About cases in the E-Discovery tab
- Case workflow summary: Discovery Administrator
- Customizing the case review status tags
- Creating a case
- Viewing the details of a case
- Editing a case
- Performing a new search of a case
- Saving a search of a case
- Viewing and modifying a saved search of a case
- Applying a search-level legal hold
- Assigning Research Sets to reviewers
- Generating printable reports for searches
- Searching and tagging Collaboration messages in E-Discovery
- Reviewing and working with emails in eDiscovery
- Email export
- Collaborative reports
- Advanced eDiscovery alerts
- Email Continuity
- Methods for searching cases and accounts
- Methods for searching tables and reports
- Advanced eDiscovery Frequently Asked Questions
- Best practices, limitations, and known issues
- Advanced eDiscovery updates in previous releases
Performing a new search of a case
Administrators or reviewers with the appropriate permissions can search the archives that are associated with a selected case.
A search can then be saved and assigned to the case's reviewers as required.
Note:
You can now use an advanced search to find the emails that include a classification tag. The Veritas Information Classifier assigns classification tags to emails that match an enabled classification policy. The built-in Veritas Information Classifier policies help you to locate any emails that may infringe your corporate policies or regulations.
To perform a new search of a case
- From the E-Discovery tab, select the Cases node to display the cases list in the main pane.
- Select the required case from the cases list.
Under the Cases node in the left pane a case_name node appears for the selected case.
- Under the Cases > case_name node, expand Saved Searches.
- Click New Search.
You can perform an Advanced Search and a Query Search.
- To perform an Advanced Search, do the following:
Select the Advanced Search tab.
Select the custodian archives you want to search.
To search archives of all of the custodians that are associated with the case, select All.
To search archives of the particular custodians, select Custom. Click Manage to search for, add, and remove the custodians. Click Update to complete the custodian selection.
Specify the search criteria by using the following options.
Select All to match all conditions you have provided.
Select Any to match any of the conditions you have provided.
Click + to add new search clauses, and complete a new row for each clause.
Click - to remove search clauses that are not required.
Searches are not case-sensitive. The search supports phrase search, Boolean operators, proximity search, and wildcard search.
Search for and select the message attributes you want to search. Refer to the table below:
Entire Message
Contains / Doesn't Contain
Subject
Contains / Doesn't Contain
Body
Contains / Doesn't Contain
From
Contains / Doesn't Contain
Note:
Produces search results from the From field.
To
Contains / Doesn't Contain
Note:
Produces search results from the To, BCC, and CC fields.
Has Attachment
Yes / No
Attachment Name
Contains / Doesn't Contain
Attachment Type
Contains / Doesn't Contain
Classified As
Contains / Doesn't Contain
Note:
This option is available if the Veritas Information Classifier service is enabled for your company.
Select a classification tag from the drop-down list. The list shows all the classification tags that have been applied to your company's messages in Enterprise Vault.cloud.
To see a tooltip with a classification tag's description, select the classification tag from the drop-down list and then point to the classification tag.
Date Sent (AND)
Is Equal To / Before / Before (Incl.) / After / After (Incl.)
From / To
Contains / Doesn't Contain
Note:
This option produces search results from the From and To fields.
Inbound Message (AND)
Yes / No
Outbound Message (AND)
Yes / No
Is Hidden
Yes / No
IP Header
Contains / Doesn't Contain
- To perform a Query Search, do the following:
Select the Query Search tab.
Select the custodian archives you want to search.
To search archives of all of the custodians that are associated with the case, select All.
To search archives of the particular custodians, select Custom. Click Manage to search for, add, and remove the custodians. Click Update to complete the custodian selection.
Specify the search query by providing keywords.
- Click Search.
Note:
The results of an Advanced Search include a Relevance column. The length of the bar in this column represents how closely the email matches the search criteria, relevant to the other emails in the results.
- Click Save Search.
