Enterprise Vault™ Compliance Accelerator Administrator's Guide

Last Published:
Product(s): Enterprise Vault (12.3)
  1. Introducing Compliance Accelerator
    1.  
      Key features of Compliance Accelerator
    2.  
      About the Compliance Accelerator components
    3.  
      The Compliance Accelerator process
    4.  
      About randomly sampling items with Compliance Accelerator
    5.  
      About the intelligent review feature in Compliance Accelerator
    6.  
      About the deduplication feature in Compliance Accelerator
    7. Product documentation
      1.  
        White papers on the Veritas Support website
  2. Introducing the Compliance Accelerator client
    1.  
      About the Compliance Accelerator client
    2.  
      Opening the Compliance Accelerator client
    3.  
      Finding your way around the Compliance Accelerator client
  3. Setting up employees and employee groups
    1.  
      About employees and employee groups
    2.  
      Creating employee profiles
    3.  
      Mapping employee properties to Active Directory or Domino directory attributes
    4.  
      Editing the details of employees
    5.  
      Creating employee groups
    6. Assigning roles to employees
      1.  
        About the predefined Compliance Accelerator roles
      2.  
        About the Compliance Accelerator permissions
      3.  
        Creating Compliance Accelerator roles
      4.  
        Editing the properties of Compliance Accelerator roles
      5.  
        Assigning Compliance Accelerator roles to employees or groups
      6.  
        Deleting Compliance Accelerator roles
  4. Working with departments
    1.  
      About departments
    2.  
      Creating departments
    3.  
      Adding monitored employees and groups to departments
    4.  
      Editing the monitoring policy for employees and groups
    5.  
      Moving employees or groups between departments
    6.  
      Moving departments
    7.  
      Assigning department reviewers, compliance supervisors, and delegates
    8. Implementing Chinese Walls security
      1.  
        Enabling Chinese Walls
      2.  
        Managing Department Users
    9. Managing exception employees
      1.  
        Designating employees as exceptions
      2.  
        Assigning further exception reviewers to an exception
      3.  
        Moving an exception employee to another department
      4.  
        Removing exception status
      5.  
        Removing exception reviewers
    10. Grouping departments into partitions
      1.  
        Creating department partitions
    11. Using attributes to classify departments
      1.  
        Setting up department attributes
      2.  
        Assigning attributes to departments
  5. Searching for items
    1. About searching with Compliance Accelerator
      1.  
        Limitations on searching certain types of Skype for Business content
    2.  
      Creating and running Compliance Accelerator searches
    3.  
      About the search criteria options
    4.  
      Guidelines on conducting effective searches
    5.  
      Pausing and resuming Compliance Accelerator searches
    6.  
      About the Monitor Searches tab
    7.  
      Searching the items of exception employees
    8.  
      Selecting the archives in which to search
    9. Building Compliance Accelerator search schedules
      1.  
        Setting up new search schedules
      2.  
        Examples of recurring search schedules
    10. Defining hotwords to search for
      1.  
        Adding hotwords
      2.  
        Editing existing hotwords
      3.  
        Deleting hotwords
      4.  
        Adding hotword sets
      5.  
        Editing existing hotword sets
      6.  
        Deleting hotword sets
      7.  
        Importing the predefined hotwords
    11.  
      Configuring how Compliance Accelerator handles email addresses
    12.  
      Using Compliance Accelerator to search archived Skype for Business content
  6. Manually reviewing items
    1. About reviewing with Compliance Accelerator
      1.  
        Limitations on reviewing certain types of Skype for Business content
    2.  
      About the Review pane
    3.  
      How the Prevent self-review option limits the reviewing activities of exception employees
    4.  
      Filtering the items in the Review pane
    5.  
      Assigning review marks to items
    6.  
      Adding comments to items
    7.  
      Viewing the history of items
    8.  
      Displaying printable versions of items
    9.  
      Downloading the original versions of items
    10.  
      Copying the item list to the Clipboard
    11.  
      Changing how the Review pane looks
    12.  
      Setting your Review pane preferences
    13. Escalating items
      1.  
        Assigning escalated items to other escalation reviewers
      2.  
        Closing escalated items
    14.  
      Storing reviewing comments for reuse
  7. Working with research folders
    1.  
      About research folders
    2.  
      Creating research folders
    3.  
      Editing the properties of research folders
    4.  
      Copying items to research folders
    5.  
      Reviewing the items in research folders
    6.  
      Exporting items from research folders
    7.  
      Giving other users access to your research folders
    8.  
      Committing research folder items to the department review set
    9.  
      Removing items from research folders
    10.  
      Deleting folders
  8. Exporting items
    1. About exporting items
      1.  
        Limitations on exporting certain types of content
    2.  
      Performing an export run
    3.  
      About the limits on the number of simultaneous export runs
    4.  
      How to optimize export runs
    5.  
      Exporting items from the review set of an exception employee
    6.  
      Making the export IDs visible in Microsoft Outlook
  9. Creating and viewing reports
    1.  
      About the Compliance Accelerator reports
    2.  
      Creating Compliance Accelerator reports
    3. Available Compliance Accelerator reports
      1.  
        Compliance Supervisor Responsibility report
      2.  
        Department Roles Detail report
      3.  
        Department Roles Summary report
      4.  
        Differential Sampling Summary by Department report
      5.  
        Effective Roles by User report
      6.  
        Evidence of message type Review by Department/Employee reports
      7.  
        Item Aging by Department report
      8.  
        Message Stats Summary report
      9.  
        Message Summary report
      10.  
        Monitored IDs by Department report
      11.  
        Questioned Items by Department report
      12.  
        Responsibility by Department report
      13.  
        Responsibility by Reviewer report
      14.  
        Review Activity Summary by Department report
      15.  
        Reviewer Activity by Department report
      16.  
        Reviewer Activity Detail report
      17.  
        Reviewer Mapping report
      18.  
        Unreviewed Departments report
      19.  
        Unsupervised Departments report
    4.  
      Viewing existing reports
    5.  
      Deleting reports
    6. About viewing Compliance Accelerator datasets using the OData web service
      1.  
        Available Compliance Accelerator datasets
      2.  
        Accessing the Compliance Accelerator datasets
      3.  
        Using the OData service with Microsoft Excel
      4.  
        Using the OData service with Microsoft SQL Server Reporting Services (SSRS)
  10. Appendix A. Customizing Compliance Accelerator
    1.  
      Specifying the Windows domains with which to synchronize employee details
    2.  
      Customizing the reviewing action statuses
    3. Setting Compliance Accelerator system configuration options
      1.  
        Ad Hoc Searches configuration options
      2.  
        Diagnostics configuration options
      3.  
        Document Conversion configuration options
      4.  
        Export/production configuration options
      5.  
        General configuration options
      6.  
        Home Page configuration options
      7.  
        Item Prefetch Cache configuration options
      8.  
        Item Prefetch Cache (Advanced) configuration options
      9.  
        Policy Integration configuration options
      10.  
        Profile Synchronization configuration options
      11.  
        Random Capture configuration options
      12.  
        Reviewing configuration options
      13.  
        Search configuration options
      14.  
        Security configuration options
      15.  
        System configuration options
      16.  
        Vault Directory Synchronization configuration options
    4.  
      Customizing the columns in the Review pane
  11. Appendix B. Importing configuration data from an XML file
    1.  
      About importing configuration data
    2.  
      Sample XML files
    3.  
      Format of the Dataload.xml file
    4.  
      Importing the configuration data
    5. About the ImportExport command
      1.  
        ImportExport syntax
      2.  
        Examples of ImportExport commands
  12. Appendix C. Troubleshooting
    1.  
      A security warning may appear when you preview certain items in the Review pane of the Compliance Accelerator client
    2.  
      Issues with the random sampling of items
    3.  
      Display issues when you run the Compliance Accelerator client in Windows 8 or later
    4.  
      Display issues when you open a Compliance Accelerator website in Internet Explorer 10 or later
    5.  
      Vault stores not displayed in the Compliance Accelerator client
    6.  
      Compliance Accelerator searches return unexpected results
    7.  
      Errors when exporting items from Compliance Accelerator
    8.  
      TNEF-encoded attachments to Internet Mail (.eml) messages may not be readable after you export the messages from a review set
    9.  
      Synchronization errors after you rename the SQL Server computer
    10.  
      Performance counter errors when the Accelerator Manager service starts
    11.  
      SQL Service Broker warning when restoring a customer database to a different server
    12. Issues with Compliance Accelerator reports
      1.  
        You receive the message "An error occurred creating the report" when you try to generate reports
      2.  
        Prompt to install SQL Server when printing a report for the first time
      3.  
        Reports that you export as CSV may not open properly in Microsoft Excel
      4.  
        Garbled Japanese characters when exporting reports in Acrobat format
      5.  
        Troubleshooting OData errors

About the search criteria options

Compliance Accelerator groups the search criteria options into multiple sections, which are described below. Click the arrow icons at the right to expand or collapse the sections.

When you construct a search that contains multiple options, pay attention to how each option interacts with the others in the search properties pane. Compliance Accelerator links all the selected options together with Boolean AND operators rather than OR operators. For example, suppose that you construct a search whose criteria include the following:

  • A data range in the Date range section

  • A search term in the Search terms section

  • A file extension in the Attachments section

The search results contain only those items that match all the search criteria. Compliance Accelerator ignores any items that match some of the search criteria options but not others.

Search section

The Search section identifies the search and specifies when it runs.

Context

Identifies the department or research folder in which the search will run. In the case of an application-wide search, this is <All Departments>.

Name

Specifies a name for the search, such as "Daily Message Capture (London)".

Based on Search

Lets you select an existing search as the basis on which to set the criteria for the new search.

Save results in

If displayed, lets you select a location in which to save the results. Select New folder in <Context> in the drop-down list if you want to specify the details of a new folder in which to save the results.

This option is available only when you create a search in a folder that is not linked to any department (you have selected "My Research" in the left pane).

Search Type

Specifies whether the search runs immediately or at a scheduled time. If you select Scheduled, you can specify a period during which the search is to run. You can also choose from one of a number of existing schedules.

You can also conduct guaranteed sample searches. Each guaranteed sample search runs at the selected sampling time, which is 1:00 A.M. by default. If the search returns fewer results than your monitoring policy demands, Compliance Accelerator adds randomly-sampled items to the review set to make up the shortfall. In effect, therefore, you can assemble more focused review sets that are weighted towards search-specific results instead of purely randomly-sampled items.

Automatically accept search results

Specifies whether to add the search results to the review set automatically. This option may be useful for any proven searches that you intend to run on a regular basis. If you select Automatically accept search results, you cannot reject the results and change the search criteria. We recommend that you clear Automatically accept search results until you have tested that the search returns the expected results.

A search that returns an error from any archive is not automatically accepted, regardless of this setting.

Include items already in review

Specifies whether the search results can include the items that you have previously captured and added to the review set. For an immediate search or scheduled search, we recommend that you select this box to ensure that the results include the items that may already be in review from other searches.

Sampling section

The Sampling section lets you sample the search results and add a random selection of items to the review set.

Compliance Accelerator does not deduplicate randomly-sampled items.

Sampling percentage

Specifies the percentage of search results to include in the review set. You can specify fractions, as in 10.25.

You may not be able to change the sampling percentage if the owner of the department has locked this setting in the department properties.

Minimum per author

Specifies the minimum number of items per author to include in the review set. If there are no items for an author in the search results, none can be included in the sample. Note that as the authors can be from outside the selected department, you may return more search results than expected.

Absolute limit

Sets an upper limit on the total number of search results to add to the review set. This option takes precedence over any values that you set in the Sampling percentage box and Minimum per employee box.

Date range section

The Date range section lets you search for items according to when they were sent or received.

Today / Yesterday / Last 7 days / Last 14 days / Last 28 days

Limits the search to items that were sent or received during the selected period. The date ranges are relative to when the search runs, which is today in the case of an immediate search.

You may find these options useful when creating a scheduled, recurrent search that runs once every day, week, two weeks, or four weeks. For example, if the search runs once a week, select Last 7 days to limit the range to the days since the search last ran.

Specific date range

Lets you search the items that were sent or received during a longer or more specific period than the other date range options permit. To enter a date, click the options at the right of the From and To boxes and then select the required date. Unlike the other date range boxes, a specific date range remains static and not relative to when the search runs.

Since search last ran

For a scheduled search only, lets you search the new items that have arrived since the last time you ran the search. This option is similar to options such as Today and Yesterday. However, it lets you set an explicit start date for the first run of the search.

By default, this option searches from the date of the last run (or the start date for the first search) to the current day minus 1 (that is, up to yesterday).

Authors and Recipients section

The Authors and Recipients section targets the departments for the search and the direction of the items to search. Any departments that you have organized into partitions can only search items to and from departments in the same partition.

Message Route

Specifies the direction in which the items for which you want to search have traveled. You can search for the items that are to or from the selected departments, and for the items that have traveled between the selected departments and other departments.

The available message route options can depend on the date range that you have specified and on how Compliance Accelerator has been configured.

Any Of/All Of

Specifies whether to apply the search to any of or all of the selected departments and employees.

Use inheritance, automatically include new departments

For application-wide searches only, lets you specify whether to apply the search to the subdepartments of the selected departments. By default, any new departments that are subdepartments of others automatically inherit any active, recurring searches that you have applied to those departments. This is also true of any existing departments that you move under departments that have recurring searches.

Department tree

Specifies the departments and employees that you want to include in the search. Click the arrows to the left of the department names to expand them and view the nested departments and exception employees.

When you select a department, you do not automatically include any exception employees in the department. To search exception employees, you must select each one explicitly.

Freeform email addresses / domains

Lets you type one or more email addresses and domains. Type each address or domain on a line of its own to search for the items whose From, To, CC, or BCC field contains any of the addresses or domains. Type all the addresses and domains on a single line to search for items in which they are all present.

Place the minus sign (-) in front of an address or domain to exclude it from the search. To exclude multiple addresses or domains, type them all on a single line.

This field is not available for all possible message routes.

Search terms section

The Search terms section specifies the words or phrases for which Compliance Accelerator should search in the subject lines of items and their bodies. By default, when you search for words in both the subject of an item and its content, Compliance Accelerator finds those items that meet one or both criteria. However, it is possible to set up Compliance Accelerator so that only those items that meet both criteria are found.

Subject

Searches for those items that contain any or all of the specified words or phrases in either their subject lines or the file names of their attachments.

Content

Searches for those items that contain any or all of the specified words or phrases in their bodies and any searchable attachments.

The words or phrases that you specify here are highlighted in the Review pane when you review the items that this search has found.

Observe the following guidelines when you type the words and phrases:

  • Compliance Accelerator searches are case-insensitive.

  • Regular expressions are not permitted.

  • If you type multiple words on the same line, Compliance Accelerator treats them as a phrase.

  • Type each word on a line of its own if you want to use the Any of option or All of option to refine the search criteria.

    In the following example, Compliance Accelerator joins together the three words with an OR operator ("server OR group OR cluster"). Any item that contains one or more of the words matches the search criteria.

    Any Of: server
            group
            cluster

    In the next example, Compliance Accelerator joins together the three words with an AND operator ("server AND group AND cluster"). Only those items that contain all three words match the search criteria.

    All Of: server
            group
            cluster

    In the following example, Compliance Accelerator joins together the phrase "server group" and the word "cluster" with an AND operator ("'server group' AND cluster"). Only those items that contain both the phrase "server group" and the word "cluster" match the search criteria.

    All Of: server group
            cluster
  • You can use an asterisk (*) wildcard to represent zero or more characters in your search. Use a question mark (?) wildcard to represent any single character.

    A wildcard search always finds items that match your search criteria and that were archived in Enterprise Vault 10.0 or later. To ensure that the search results also include items that Enterprise Vault 9.0 or earlier has archived, enter at least three other characters before the wildcard.

  • Place a minus sign (-) at the start of a line to indicate that you want to exclude from the search results any items that contain the following word or phrase. For example, the following search term finds the items that contain either of the words "server" and "group" but do not contain the word "cluster" ("(server AND NOT cluster) OR (group AND NOT cluster)"):

    Any Of: server
            group
            -cluster

    A search term cannot comprise an excluded word or phrase only. When you specify such words or phrases, you must also specify a positive word or phrase that you want to appear in the search results.

  • Click Hotwords to choose from a list of hotwords and phrases, if you have previously created one.

  • Compliance Accelerator ignores any nonalphanumeric characters in the search term, except for those that have special significance, such as the plus sign, minus sign, and question mark.

    For example, a search for the term US@100 may find instances not only of US@100 but also of US 100 and US$100. Including nonalphanumeric characters in the search term may therefore return more results than you expect.

Attachments section

The Attachments section lets you search for items with a certain number or type of attachments.

Number

Specifies the required number of attachments. The default option, "Does not matter", means that the item can have zero or more attachments. All the other options require you to type one or two values that specify the required number of attachments.

File extensions

Specifies the file name extensions of particular types of attachments for which to search. Separate the extensions with space characters. For example, type the following to search for items with HTML or Microsoft Excel file attachments:

.htm .xls

This search option evaluates attachments by their file names only; it does not check their file type. For example, suppose that a user changes the file name extension of a .zip file to .zap and then sends the renamed file as an email attachment. A Compliance Accelerator search for items that have attachments with a .zip extension does not find the email with the renamed attachment.

The contents of some attachments may not be searchable because Enterprise Vault has not indexed them. In particular, file formats such as Fax and Voice do not have any indexable content.

Some Enterprise Vault registry entries prevent it from indexing the contents of selected file types. For example, this is the case with the ExcludedFileTypesFromConversion entry. For more information, see the Enterprise Vault Registry Values guide.

For more information on how Compliance Accelerator conducts searches in which you have specified file name extensions, see the following article on the Veritas Support website:

https://www.veritas.com/docs/100008537

Miscellaneous section

The Miscellaneous section lets you search for items of a certain size and type or that have the specified retention category.

Message size

Specifies the size in kilobytes of each item for which to search, as reported by the message store (Exchange, Domino, and so on). The item size includes the size of any attachments.

Message type

Searches for items of the selected types.

Retention category

Searches for items to which Enterprise Vault has assigned the selected retention categories.

Policies section

The Policies section lets you search for items according to the tags with which any additional policy management software has classified them.

Policy

Lets you search for the items that match certain classification policies. There are several types of policies:

  • Inclusion. Any item that your policy management software has classified for inclusion in the review set may be guilty of the most serious offenses, such as swearing, racism, or insider trading. You would normally want to ensure that the items exhibiting any of these features were included in your review set.

  • Exclusion. Spam items and newsletters are typical examples of the items that your policy management software may classify for exclusion from the review set.

  • Category. Your policy management software may categorize the items that exhibit certain characteristics, such as containing Spanish text. This type of policy provides no information on whether an item should be included in or excluded from the review set.

These policy types are not mutually exclusive. Your policy management software may apply multiple policies of different types to the same item. However, note that inclusion policies always take precedence over the other types of policies.

Select the required policy type and then select the names of the policies for which you want to search. Alternatively, you can select Custom as the policy type and then type the names of one or more policies. Separate multiple policy names with commas, like this:

CustomPolicy1,CustomPolicy2

If you choose to search for multiple policies, the search results will contain items that match any one of the policies.

Filter policies by current department

Lets you omit from the list those policies that are not in use in the current department.

Intelligent Review section

In the Intelligent Review section, choose options for the learning engine in Compliance Accelerator. This engine allows Compliance Accelerator to search for items intelligently, based on the actions that reviewers have taken on earlier items. For example, after a reviewer has marked a spam message or out-of-office reply as irrelevant then, when Compliance Accelerator detects other items that have similar characteristics, it can handle them in the same way.

Note the following:

  • Searches that use the intelligent review feature may take slightly longer to complete than those that do not use this feature.

  • Searches that you conduct in a research folder uses the learning data of the associated department. Folder searches do not have their own learning data and do not contribute to the department's learning data.

To determine the relevance of an item, Compliance Accelerator looks at the item's metadata and its route from sender to recipients. However, Compliance Accelerator does not evaluate the content of the item.

Learning Behavior

The options are as follows:

  • None. Compliance Accelerator searches for items in the normal way, without implementing Intelligent Review. This is the default option.

  • Search and prioritize. Compliance Accelerator searches for both relevant items and irrelevant items without favoring one over the other. So, if your chosen Sampling percentage value requires that you capture and review 10% of items, Compliance Accelerator captures 10% - but a substantial number of the items may be irrelevant.

    With this option, however, Compliance Accelerator does give the items a status of either Unreviewed (Irrelevant) or Unreviewed (Relevant) as it adds them to the review set. When you later review the items in the Review pane, you can filter them by their Unreviewed status to distinguish between the relevant and irrelevant items.

  • Search and then sample ONLY relevant content. Compliance Accelerator searches across all the items and captures the relevant ones only, until it has captured the required percentage. So, if your chosen Sampling percentage value requires that you capture and review 10% of items, Compliance Accelerator captures 10% - all of them considered to be relevant.

    If there are too few relevant items to fulfil the chosen sampling percentage, Compliance Accelerator does not supplement them with irrelevant items. This is an important difference between this option and the equivalent option, Sample exact percentage of ONLY relevant content, in the Department Properties pane.

    See Creating departments.