Important Update: Cohesity Products Documentation


All Cohesity product documentation are now managed via the Cohesity Docs Portal: https://docs.cohesity.com/HomePage/Content/home.htm. Some documentation available here may not reflect the latest information or may no longer be accessible.

Arctera™ Insight Surveillance Web Client Reviewer's Guide

Last Published:
Product(s): Veritas Alta Surveillance (1.0)
  1. Introducing Arctera Insight Surveillance
    1.  
      About Insight Surveillance
    2.  
      Key features of Insight Surveillance
    3.  
      Feature comparison: Enterprise Vault Compliance Accelerator Desktop Client Vs Insight Surveillance web client
    4.  
      About Insight Surveillance system security
    5.  
      Insight Surveillance multi-tier architecture
    6.  
      System requirements
  2. Getting started
    1.  
      Signing in to Insight Surveillance
    2.  
      Signing out from Insight Surveillance
  3. Working with dashboard widgets
    1.  
      Understanding the Dashboard page
    2.  
      Viewing status summary of recently reviewed departments
    3.  
      Pinning and unpinning departments to view review status
    4.  
      Changing the order of pinned departments
    5.  
      Viewing the review status summary of escalated items
    6.  
      Viewing a summary of searches and exports
  4. Managing department-level searches
    1.  
      About department-level searches
    2.  
      Guidelines for effective searches
    3.  
      Creating and running department-level searches
    4.  
      Pausing and resuming searches
    5.  
      Downloading search details for archives
    6.  
      Disabling scheduled searches
    7.  
      Previewing search results
    8.  
      Accepting search results
    9.  
      Rejecting a search result
    10.  
      Resubmitting a search
  5. Managing reviews
    1.  
      About reviewing with Insight Surveillance
    2.  
      Understanding the Review page
    3.  
      Rearranging columns in the item list pane
    4.  
      Changing the Preview pane position
    5.  
      Filtering the items in the Review pane
    6.  
      Reviewing the Audio-Video Transcript type items
    7.  
      Reviewing searched items
    8.  
      Reviewing research folder items
    9.  
      Reviewing department items
    10.  
      Viewing Intelligent Review Details
    11.  
      Adding or removing text for machine learning
    12.  
      Assigning review status to items
    13.  
      Viewing hotwords highlighting
    14.  
      Viewing hotwords in collaboration message
    15.  
      Viewing tags highlighting
    16.  
      Viewing tags in collaboration message
    17.  
      Viewing the full content in a new window
    18.  
      Adding comments to items
    19.  
      Escalating the review items
    20.  
      Applying labels to items
    21.  
      Viewing history of items
    22.  
      Printing the original versions of items
    23.  
      Printing and downloading the items and attachments

Filtering the items in the Review pane

The search and filter options available in the Review pane provide several parameters to filter items for review.

To filter the items in the review pane

  1. In the left navigation pane, click Review.
  2. In the Department drop-down list, do the following steps:

    Note:

    The selections are persisted across all login sessions for the logged-in user.

    • In the Mode drop-down list, choose whether to perform a standard review of the items in the review set or an escalation review.

      Note:

      Escalation Review mode is available to escalation reviewers only. It lets these reviewers view and change review status of the items that other reviewers have escalated to them for further attention.

    • In the Dept drop-down list, select the department, a nested department, or folder for which you want to display the items in the review set.

    • In the Items drop-down list, select a group of items you want to review.

      The following options are available:

      • Temporary Assignment: This option allows you to temporarily reserve a predefined number of unassigned items from the review set for your current session. These items are not permanently assigned to you, but while your session is active, other reviewers cannot access or review them.

        For example, if you log in and select Temporary Assignment with a limit of 200 unassigned items, you can review these items without permanently assigning them to yourself. While your session is active, other reviewers in the department cannot see or access these items. However, once you log out or end the session, any unmarked items become available again for other reviewers.

      • All Items: This option allows you to view all review items in the review set, including those assigned to other reviewers. However, using this option may lead to duplicate work if multiple reviewers mark the same items.

        For example, if you select All Items, you can view every item in the review set, including those assigned to other reviewers. However, if you mark these items, you may duplicate the work of others, leading to inconsistencies. To prevent this, use this option only for browsing these items and not reviewing them.

      • My Items: This option displays only when the Standard Review mode is selected. It does not appear when the Escalation mode is selected. When you click Apply, it shows the items that are explicitly assigned to you according to the review assignment criteria configured for the department. Refer to the sample image below.

        For example, if 30 out of 100 items collected via searches and any sampling method are assigned to you, only those 30 items will appear for you. You cannot view items assigned to other reviewers of the department.

  3. In the Advanced Filter drop-down list, specify the following if needed to filter review items.
    • Filter on Subject - This field is applicable for searching emails and collaboration messages. Enter a word or phrase that you want to search. The application filters the review items in which the subject field contains the specified words.

    • Filter on Item ID - This field is applicable for searching items based on their Item ID. Expand the Advanced Filter panel to view this field. Enter the Item ID of the item that you wish to view and then click Apply or press Enter. The review item with the matching Item ID is displayed and the previous filter selection criteria gets cleared. The Item ID is displayed in the Preview, the comments, and in the history tab.

  4. In the Filter drop-down, do any of the following as required:
    • Choose the filter criteria from the default Preset options. By default, the following preset options are available:

      • All Unreviewed

      • Today's Unreviewed

      • All Unreviewed Exchange

      • All Unreviewed Instant Messaging

      • All Unreviewed Bloomberg

      • All Unreviewed Domino

      • All Messages

    • Expand the necessary facets and select the item classification options you want to apply.

      If you want to use the same facet settings frequently, you can save this setting as a filter preset option. In the Preset drop-down, select Custom, then click the + icon next to the drop-down arrow. In the Save preset as field, enter a unique name of the filter preset, and click OK.

      Upon successful addition, the newly saved filter preset appears in the Preset drop-down.

    The following table lists the available filter facets.

    Facets

    Description

    Status

    Select items by their status, like pending, reviewed, questioned, and so on.

    Capture date

    Selects items that Insight Surveillance has captured over the specified period. The default options are - Today, Yesterday, Last 7 days, Last 14 days, and Last 28 days.

    Click Set date range to filter the items based on the date range specified.

    Clicking the calendar icon displays the review item count beneath the date, month, and year wise view. When selected, the application also displays day-wise, month-wise, and year-wise item counts beneath the respective dates, months, and years. If there is no items count, a hyphen (-) is displayed. For more details,

    Date

    Select items by the date on which they were created. The default options are - Today, Yesterday, and Last week.

    The last week defines Monday to Sunday range of the last week. You can use this option to review weekly items. When you hover over the Last week option, you can view the last week Monday to Sunday date range. For example, if you are working on 18th Nov 2021, the last week dates are displayed as 8th Nov 2021 to 14th Nov 2021.

    Click Set date range to filter the items based on the date range specified.

    Clicking the calendar icon displays the review item count beneath the date, month, and year wise view. When selected, the application also displays day-wise, month-wise, and year-wise item counts beneath the respective dates, months, and years. If there is no items count, a hyphen (-) is displayed.

    For more details

    Search

    Select items that one or more searches have captured.

    If there are more than 20 items, the application displays the Show all option. To view all the items, click Show all and select maximum 20 items.

    To select multiple items, select the corresponding check boxes. You can select items from multiple pages. You can use the Go to page field to select the available page number you want to view. Else, the application displays the message as Invalid page.

    The total of selected items is displayed in the bottom. To remove entire selection, click the Clear icon. To remove any of the selected items, click on the link (which is adjacent to the Clear icon), search for the employee record, and click the Remove icon.

    Scheduled search

    Select items that one or more searches have captured according to their search schedules.

    Hotword

    Select items by the name of the hotword.

    Hotword Set

    Select items by the name of the hotword set.

    Author

    Select items by the name of the person who sent them.

    Escalation status

    Select items by whether they have been escalated to an escalation reviewer or subsequently closed by that reviewer.

    Appraisal status

    Select items by their appraisal status.

    Type

    Select one or more supported message types.

    For more information on the Insight Surveillance supported message types,

    The available options are displayed based on the services subscribed and enabled for you. For example -

    • If MS Teams Archiving is enabled for you, the Teams Chat and Teams Channel options are available for filtering.

    • If the search result has audio or video items, then the Audio-Video Transcript option is available for filtering.

    Direction

    Select items that have traveled in the specified direction. The options are as follows:

    • Not specified - Select to avoid choosing any direction.

    • Internal - Selects items where the author and all recipients are internal to your organization.

    • External Inbound - Selects items where the author is external to your organization and at least one recipient is internal.

    • External Outbound - Selects items where the author is internal to your organization and at least one recipient is external.

    Labels

    Select items by their labels.

    Tags

    Select items by their tags.

    Tags action

    Select items by their tag actions.

    Sentiment score

    Select items based on the predefined sentiment score categories. A score in the range of 0 to 100 is assigned, where...

    • 0 - 39 indicates that the item expresses the negative sentiment.

    • 40 - 59 indicates that the item represents the neutral sentiment.

    • 60 - 100 indicates that the item represents the positive sentiment.

    To customize a different sentiment score range and use it as a preset later, click New sentiment score range. Specify the minimum and maximum score you want to capture, and provide a unique name to this preset. Click OK to save the preset as shown in the sample image below.

    Last marked by

    Select items by the person who has lastly changed a review status of the items.

    Comments

    Select items to which reviewers have added comments.

    Size

    Select items by their size in kilobytes.

    Number of attachments

    Select items by the number of attachments that they have.

    Capture method

    Select items by the method that Insight Surveillance has used to capture them and add them to the review set. The options are:

    • Not specified - Select to avoid choosing any direction.

    • Search - Select to choose items that have been captured as a result of searches.

    • Ad-hoc. Select items that have been added to folders.

    • Random Sampling - Select to choose items that Insight Surveillance has captured and added to the review set according to your designated monitoring policy.

    • Guaranteed Sample Search - Select to choose the results of guaranteed sample searches.

    • Tags - Select to choose items that Insight Surveillance has captured and added to the review set according to designated tags.

    Escalation owner

    Select items by the escalation reviewer who has responsibility for them.

    Escalated by

    Select items by the person who escalated them to an escalation reviewer for further attention.

    Last appraised by

    Select items by the person who appraised the items.

    MPIP protected items

    Arctera Insight Surveillance supports decryption of Microsoft Purview Information Protection (MPIP) protected items.

    Select items based on their encryption status, such as Unencrypted, Encrypted, Unknown. Note that non-SMTP journal items are detected as Unknown.

    Assigned Reviewer

    Select items by the assigned reviewer. It is recommended to use this filter in Standard Review mode with All Items selected from the Items drop-down list. Refer to the sample image below.

  5. You can apply marks to items by right-clicking the facet values. For example, to mark all the items by a particular author, right-click the author's name in the list and then click Mark all items. The Bulk Mark dialog appears. Enter your comment and click OK. The mark will be applied to all items with the selected facet value.
  6. Click Apply.

    Based on the selected filter criteria, the application displays all the filtered items in the right pane.