Arctera™ Insight eDiscovery Help

Last Published:
Product(s): Veritas Alta Archiving (1.0), Veritas Alta eDiscovery (1.0)
  1. About Arctera Insight eDiscovery
    1.  
      Introducing Arctera Insight eDiscovery
    2.  
      Insight eDiscovery key features
    3.  
      Insight eDiscovery term definitions
  2. Getting started with Insight eDiscovery
    1.  
      What's new in this release
    2.  
      Signing in to Insight eDiscovery
    3.  
      Logging off from Insight eDiscovery
    4.  
      Resetting a forgotten password
    5. About the Insight eDiscovery user interface
      1. About the left navigation pane
        1.  
          Investigations tab
        2.  
          eDiscovery tab
      2.  
        About the title bar options
      3.  
        About the search bar
      4.  
        About the bottom navigation bar
      5.  
        About the Details pane
    6.  
      Accessing your own archived emails
  3. Insight eDiscovery roles
    1.  
      About account roles and Insight eDiscovery
    2.  
      Account role
    3.  
      Reviewer role
    4.  
      Administrator role
    5. Assigning account roles
      1.  
        Assigning the Reviewer role to an account
      2.  
        Assigning the Administrator role to an account
  4. Managing investigations
    1.  
      About Investigations
    2. About Targeted Collections
      1.  
        Adding targeted collection for Microsoft Teams
      2.  
        Adding targeted collection for OneDrive for Business
      3.  
        Adding targeted collection for Exchange Online
      4.  
        Adding targeted collection for Enterprise Vault
      5.  
        Adding targeted collection for data import
      6.  
        Managing Insight Capture collectors from Insight eDiscovery
      7.  
        Sending collected data to cases
    3. About Analytics Dashboard
      1.  
        Performing query searches using Analytics Dashboard
    4.  
      About Managed Accounts
    5. About Searches in investigation
      1.  
        Creating a new search
      2.  
        Saving searches as on-going and standard searches
      3.  
        Viewing previously executed but unsaved searches during an investigation
      4. Updating on-going and standard searches
        1.  
          Updating on-going and standard searches from Mailbox
        2.  
          Updating an on-going or a standard search from Managed Accounts
      5.  
        Exporting a summary report of searched items
      6.  
        Deleting searches
    6.  
      About Hit Highlighting
    7. Working with searched emails
      1.  
        Applying tags and legal hold to emails
      2.  
        Applying labels to emails
      3.  
        Exporting searched emails
      4.  
        Exporting a search summary report for emails
      5.  
        Reassigning emails
      6.  
        Hiding and unhiding emails
      7.  
        Deleting emails permanently
    8. Working with searched collaboration messages
      1.  
        Searching collaboration messages during investigation
      2.  
        Applying tags and legal hold to collaboration messages
      3.  
        Applying labels to collaboration messages
      4.  
        Exporting collaboration messages
      5.  
        Exporting a search summary report for collaboration messages
    9. Working with searched files
      1.  
        Working with Audio-Video files
      2.  
        Applying tags and legal hold to files
      3.  
        Applying labels to files
      4.  
        Exporting searched files
      5.  
        Exporting a search summary report for files
    10. Working with Advanced ECA searches
      1.  
        Creating an Advanced ECA search
      2.  
        Updating an Advanced ECA search
      3.  
        Filtering an Advanced ECA search
      4. Applying tags to the Advanced ECA search items
        1.  
          Applying tags to emails in Advanced ECA search
        2.  
          Applying tags to collaboration messages in Advanced ECA search
        3.  
          Applying tags to files in Advanced ECA search
      5. Applying labels to the Advanced ECA search items
        1.  
          Applying labels to emails in Advanced ECA search
        2.  
          Applying labels to collaboration messages in Advanced ECA search
        3.  
          Applying labels to files in Advanced ECA search
      6. Exporting the Advanced ECA search items
        1.  
          Exporting emails from Advanced ECA search
        2.  
          Exporting collaboration messages from Advanced ECA search
        3.  
          Exporting files from Advanced ECA search
      7. Exporting an Advanced ECA search summary report
        1.  
          Exporting a search summary report for emails
        2.  
          Exporting summary report for collaboration messages
        3.  
          Exporting summary report for files
      8.  
        Reassigning emails from the Advanced ECA search
      9.  
        Printing the selected Advanced ECA searched items
      10.  
        Deleting an Advanced ECA search
    11.  
      Creating archive sets during investigation
    12. About Mail Reassignment
      1.  
        Reassigning emails
      2.  
        Viewing email reassignment status
      3.  
        Canceling the email reassignment activity
      4.  
        Generating a Mail Reassignment status report
      5.  
        Viewing mail reassignment notifications and status reports
    13. About labels
      1.  
        Creating a label
    14. About legal holds
      1.  
        Viewing the Legal Hold status of items
      2.  
        Viewing legally hold items
    15. About Tags
      1.  
        Updating tags
      2.  
        Removing items from tags
      3.  
        Deleting tags
    16. About search log
      1.  
        Viewing and exporting search log report
  5. Managing cases
    1.  
      About cases
    2.  
      About case workflow summary: eDiscovery Administrator
    3.  
      Creating case review statuses
    4.  
      Creating cases
    5.  
      Adding parent tags and their child tags
    6.  
      Applying tags to the searched items in cases
    7.  
      Removing tags of the searched items in cases
    8.  
      Viewing case details
    9.  
      Editing cases
    10. About searches in eDiscovery
      1.  
        Performing searches within cases
      2.  
        Saving searches in Review sets and Research sets
      3.  
        Viewing previously executed but unsaved searches a case review
      4.  
        Modifying saved searches of cases
      5.  
        Applying a search-level legal hold
      6.  
        Assigning review sets to reviewers
      7.  
        Generating a search summary report
  6. Managing case documents
    1.  
      Understanding document sets in cases
    2.  
      Moving case documents to production sets
    3. Understanding Archive Search
      1.  
        About Archive Searches
      2.  
        Creating research sets and archive sets
  7. Managing redaction reasons
    1.  
      About redaction reasons
    2.  
      Adding redaction reasons
    3.  
      Editing redaction reasons
    4.  
      Deleting redaction reasons
  8. Managing reviews
    1.  
      About reviewing cases
    2. Reviewing emails
      1.  
        Accessing emails for review
      2.  
        Applying tags to emails
      3.  
        Exporting emails
      4.  
        Exporting a search summary report for emails
      5.  
        Adding notes to emails
      6.  
        Applying review status to emails
      7.  
        Viewing audit history of emails
      8.  
        Printing emails
      9.  
        Restoring emails
      10.  
        Forwarding emails
    3. Reviewing collaboration messages
      1.  
        Accessing collaboration messages for review
      2.  
        Applying tags to collaboration messages
      3.  
        Applying legal hold to collaboration messages
      4.  
        Applying and removing review status to collaboration message
      5.  
        Exporting collaboration messages
      6.  
        Exporting a search summary report for collaboration messages
      7.  
        Adding notes to collaborative messages
      8.  
        Viewing audit history of collaboration messages
      9.  
        Printing collaboration messages to PDF
    4. Reviewing files
      1.  
        Accessing files for review
      2.  
        Applying tags to Files
      3.  
        Applying or removing legal hold to files
      4.  
        Applying and removing review status to files
      5.  
        Exporting files
      6.  
        Exporting a search summary report for files
      7.  
        Adding notes to files
      8.  
        Viewing audit history of files
      9.  
        Downloading files
    5.  
      Annotating and redacting email and file content in native viewer
  9. Managing production sets
    1.  
      About Production Sets
    2.  
      Moving items to production sets
    3.  
      Removing items from a production set
    4.  
      Locking and unlocking production sets
    5.  
      Configuring production set export options
    6. Exporting production sets
      1.  
        Exporting an individual production set for emails, collaboration messages, or files
      2.  
        Exporting a collective production set for emails, collaboration messages, and files
  10. Annotating and redacting content in native viewer
    1.  
      About annotations and redactions
    2.  
      Native viewer capabilities
    3.  
      Understanding the native viewer interface
    4.  
      Annotating email and file content
    5.  
      Redacting email and file content
    6.  
      Printing the annotated and redacted document
    7.  
      Downloading the annotated and redacted document
  11. Managing exports
    1.  
      About exports
    2.  
      Performing exports in Investigation and eDiscovery
    3.  
      Viewing export details of native documents
    4.  
      Viewing export details of production sets
    5.  
      Resubmitting failed export items
    6.  
      Option to maintain folder structure in the export
    7.  
      Canceling Export Batch
    8.  
      Email export FAQ
  12. Collaborative reports
    1.  
      About collaborative eDiscovery reporting
    2.  
      Report by email: Audit trail
    3.  
      Report by Case: Case History
    4.  
      Report by Case: Case Summary
    5.  
      Report by Archive: eDiscovery dashboard
  13. Insight eDiscovery alerts
    1.  
      Creating an alert
  14. Email Continuity
    1.  
      Managing Email Continuity
    2.  
      Viewing Continuity emails
  15. Methods for searching cases and accounts
    1.  
      Performing Advanced Search and Query Search
    2.  
      Search syntax for Advanced Search
    3.  
      About stop words and special characters
    4.  
      About Hit-highlighting and navigating to searched terms
    5.  
      Phrase searches
    6. Boolean operator searches
      1.  
        AND operator search
      2.  
        OR operator search
      3.  
        NOT operator search
      4.  
        About using multiple Boolean operators
      5.  
        About using Boolean operators with phrase searches
      6.  
        About Boolean operators and special characters
    7.  
      Wildcard searches
    8.  
      Proximity searches
    9.  
      Double-byte character set searches
    10.  
      About enhanced searches in Japanese
    11.  
      Searchable attachment types
    12.  
      Search examples and tips
  16. Methods for searching tables and reports
    1.  
      About Quick Search and Criteria Search
    2.  
      Searching tables, lists, and reports
  17. Insight eDiscovery Frequently Asked Questions
    1.  
      Frequently Asked Questions
  18. Best practices, limitations, and known issues
    1.  
      Best practices and limitations with Insight eDiscovery
    2.  
      Known issues with Insight eDiscovery
  19. Insight eDiscovery updates in previous releases
    1.  
      About the Insight eDiscovery updates in previous releases

Creating a new search

You can search the content of archive accounts from the Investigations tab, using Advanced Search and Query Search.

To create a new search

  1. Select the Investigations tab, and then select the node where you want to perform the new search:
    • To search your own mailbox, select My Mailbox > Mailbox, or select My Mailbox > New Search.

    • To search one or more of your managed accounts, select Managed Accounts > New Search.

    • To search a single managed account, select Managed Accounts > Accounts, and click the required account. The Search pane appears.

  2. To perform advanced search, specify the following inputs in the Advanced Search tab.

    Custodians

    • Select All to search archives of all of the custodians that are associated with the case.

    • Select Custom to search archives of the particular custodians.

      The Manage button appears. Click Manage to open the Add/Remove Custodians.

      Expand Selected Custodians to view the custodians selected for this search.

      Expand Manage Custodians and select the custodians required for this search.

      Click Update to add these selected custodians as a search input. These custodians are listed under the Selected Custodians section.

    Custom Headers

    Note:

    The Custom Headers option does not appear if there is no entry for a custom header for a particular group or tenant in database. Custom header does not work independently. You need to use the filter criteria to search the required items.

    Expand Custom Headers and set the header operator values.

    • Click + to add new search clauses.

    • Click - to remove search clauses that are not required.

    • In the first column, select the required header you want to search for. Based on the data type you have selected, the operator changes.

      For example, if you have selected the receiver date in header, the operator values can be Between, Before inclusive and After inclusive. For a numeric or integer header value, the operator values can be Is equal to, Less than, and Greater than. If you have selected a string value in header, then the operator will be Contains.

    • In the second column, select the available operator.

    • In the third column, specify the text, phrase, or date that you want to search for.

    Filters

    Expand Filters and set the filter operator values. The operators are explained in a table below.

    • Select All to match all conditions you have provided.

    • Select Any to match any of the conditions you have provided.

    • Click + to add new search clauses, and complete a new row for each clause.

    • Click - to remove search clauses that are not required.

    • Searches are not case-sensitive. The search supports phrase search, Boolean operators, proximity search, and wildcard search.

      See Search syntax for Advanced Search.

    The Filter operators are listed below:

    Message

    Entire Message

    Contains / Doesn't Contain

    Subject + Body

    Contains / Doesn't Contain

    Subject

    Contains / Doesn't Contain

    Body

    Contains / Doesn't Contain

    Inbound Message (AND)

    Yes / No

    Outbound Message (AND)

    Yes / No

    Is Hidden

    Yes / No

    IP Header

    Contains / Doesn't Contain

    Date Sent/Modified(AND)

    Is Equal To

    Select a date

    Before

    Select a date

    After

    Select a date

    Within Range

    Select a date range

    Participants

    All Senders and Recipients

    Contains / Doesn't Contain

    Senders Only

    Contains / Doesn't Contain

    Recipients Only

    Contains / Doesn't Contain

    To/Cc

    Contains / Doesn't Contain

    To

    Contains / Doesn't Contain

    Bcc

    Contains / Doesn't Contain

    Classification

    Note:

    This option is available if the Arctera Insight Classification service is enabled for a user.

    Classified As

    Contains / Doesn't Contain

    Select a classification tag from the drop-down list. The list shows all the classification tags that have been applied to your company's messages in Arctera Insight Archiving.

    To see a tooltip with a classification tag's description, select the classification tag from the drop-down list and then point to the classification tag.

    Sentiment Score

    Is Equal To / Below (Inc.) / Above (Inc.)

    Attachment

    Has Attachment

    Yes / No

    File/Attachment Name

    Contains / Doesn't Contain

    File Attachment Type

    Contains / Doesn't Contain

    See Searchable attachment types.

    Archive Date

    Filter archived data based on the date when emails, collaboration items, or files were archived.

    Is Equal To: Finds items archived on a specific date.

    Before: Finds items archived before a certain date.

    After: Finds items archived after a certain date.

    Within Range: Finds items archived between two chosen dates.

    Select date.

    Note:

    Use this filter only for the data archived after January 2021. Data before January 2021 will not appear in filtered results.

    Tip: If you want to use Query Search instead of Advanced Search, use the ArchiveDate: term and then build the search criteria.

    Source Type

    Is: Filters results that match the selected source type(s)

    Is Not: Excludes results that match the selected source type(s).

    Select one or more sources as needed.

    Department

    Note:

    This option is available if the Arctera Insight Surveillance service is enabled for a user.

    All Senders & Recipients: Filters data where both the sender and recipient belong to the selected department(s).

    Senders Only: Filters data where only the sender belongs to the selected department(s).

    Recipients Only: Filters data where only the recipient belongs to the selected department(s).

    Select Any or All operator and then click Select Department.

    A dialog box opens where you can choose one or more departments to apply as a filter.

    1. Use the Search Departments field to quickly locate a department by name.

    2. Toggle the Use Inheritance to include child departments of a selected parent department.

    3. Click Select All on Current Page to select every department visible on the current page. Else, select the required departments individually. The count of selected departments appears in the bottom of the dialog box.

    4. Click Select to confirm and apply them as a filter.

    If you want to reset your choices, click Clear Selection. If you want to close the dialog without saving changes, click Cancel.

    Important!

    • In Advanced Search, the search text input functionality is updated. In previous releases, when users were providing multiple text input with space, the default logical operator "AND" was getting applied. From now onwards, the default logical operator "OR" is getting applied to get user records.

      This operator change from "AND" to "OR" is applied to all kind of searches. If users have previously used spaces while providing the search text inputs, their saved records (saved searches/standard searches/Ongoing searches) will be impacted as the operator is changed from "AND" to "OR".

    • Based on the selected attributes, when you export the search report, the Search Summary and Search Report is generated as shown in the sample image below.

  3. To perform query search, specify the following inputs in the Query Search tab.

    Note:

    Use the scroll bar to view the lengthy queries.

    Custodians

    • Select All to search archives of all of the custodians that are associated with the case.

    • Select Custom to search archives of the particular custodians.

      The Manage button appears. Click Manage to open the Add/Remove Custodians.

      Expand Selected Custodians to view the custodians selected for this search.

      Expand Manage Custodians and select the custodians required for this search.

      Click Update to add these selected custodians as a search input. These custodians are listed under the Selected Custodians section.

    Query Search

    Specify the search query by providing keywords.

    Guidelines for specifying queries

    The application supports query searches only if the following necessary conditions are followed. Else, the application displays corresponding errors.

    Conditions

    Examples

    Operator-specific conditions

     

    The search criteria must be used after the operator and before the query text.

    Correct

    subject:hi OR attachments:test

    Incorrect

    subject:hi OR test

     

    The AND/OR/NOT operators must be written in capital letters.

    Correct

    subject:text1 AND textbody:text2 OR attflag:true

    Incorrect

    subject:text1 and textbody:text2 or attflag:true

     

    The AND/OR logical operator is missing.

    Correct

    EntireMessage:test AND NOT Entiremessage:hi

    Incorrect

    EntireMessage:test NOT Entiremessage:hi

    Spaces-specific conditions

     

    The extra space(s) between operators is not allowed.

    Correct

    (NOT subject: test AND NOT textbody :test)

     

    The space after bracket is not allowed.

    Correct

    (NOT subject: text1)

    Incorrect

    ( NOT subject: text1)

     

    The space before colon is not allowed.

    Correct

    (NOT subject: test AND NOT textbody:test)

    Incorrect

    (NOT subject : test AND NOT textbody :test)

  4. To search for the Insight Surveillance item using the Item ID Filter, perform the following steps:

    Note:

    If you have a Insight Surveillance subscription and the Show Item ID Filter feature is enabled in the Management Console, you can view the Id icon in the email preview pane as shown in the sample image below:

    Click the Id icon to copy the encrypted Item ID, then select Advanced Filter, expand Item ID Filter, choose Is Equal To, and paste the Item ID into the field as shown in the sample image below.

    Note:

    When the Item ID Filter is selected, all other filters are cleared to return the exact matching item

  5. Click Search.
  6. Click Save Search.

    See Saving searches in Review sets and Research sets.