This article describes the process of creating a new search in the Archiving management control panel.

Read the Knowledge Base article on How Do I Manage And Export Search Results? for more information.

Note: there can be up to a 24 hour lag between collection and view of objects in the archive.

To create a new search:

  1. Log in to the Archiving management control panel. Read the Knowledge Base article on Email Archiving: Data Management for more information.
  2. Navigate to Searches and select New.
  3. Select Simple or Advanced type of search.
    New search

Simple Search

Simple searches can start with a keyword search.

Simple searches execute a search for all of the criteria that are listed. Multiple elements within the same fields search for any of the elements. For example, the below simple search is looking for the keywords confidential OR privileged AND within the date range of 12th July 2017 to May 2nd 2018.Simple search

Advanced Search

From the advanced search query, start by adding a new criteria or group. There is no limit to the number of criteria or groups that a single search can have (nested groups are limited to 5 layers). Adding a group enables search users to bundle criteria together for visual organization and enables more complex Boolean relationships.

Individual criteria can be added for any indexed element or metadata from the original asset.

In each of the criteria, the set of elements being added can be included or excluded (1) from the results, limited to specific fields within the metadata (2), and the boolean relationship within each individual criteria can be managed by clicking the and or or to toggle between the two (3).

Advanced search

Save As a New Search

Save As New Search allows you to take an existing search and duplicate its criteria and share settings into a new search, eliminating the need to start from scratch when creating a new search that is the same as or similar to an existing search.

To Save as a new search:

  1. Run the search you want to duplicate and go to the details page.
  2. Click the Save as a new search button at the top right.
  3. Update the search name and description as you desire and click the Save button.Save as new search

The copied search will now appear as a new search at the top of the search list page. You can run and edit it from there.

Using wildcards:

You can use wildcard operators to locate messages and/or documents based on partial terms. You can use the asterisk ( * ) operator to locate messages and/or documents that contain specified partial terms. For example:

  • contract* - Denotes any term that begins with contract (such as contract, contracted, or contracts).
  • *@acme* - Denotes any term that contains the strings @acme (such as acme.com or jo@acme.co.uk).
  • awood* - Denotes any term that starts with the term awood, most commonly for emails/usernames with multiple potential domains (such as awood@acme.com, awood@acme.net, etc)
    Note: email addresses are tokenized as a complete string, so simply searching for awood will not return results; either the full address needs to be searched for OR a wildcard should be used to produce the desired results.
  • 43931* - Denotes any term that starts with the sequence 43931 (such as 43931.00 or 43931226).

You can use the question mark (?) operator to locate messages that contain a specified term, with a given character replaced.  For example:

  • ???? ???? ???? ???? - Denotes any term that contains four sets consisting of four characters each with a single space between sets (4417 1234 5678 9012, a common format for credit/debit card numbers”).
  • ???-??-???? - Denotes any term that contains a set of three characters, followed by a dash, followed by two characters, followed by a dash, followed by three characters (i.e. 123-45-6789, a common format for U.S. social security numbers).
  • ?inks - Denotes any term that contains any character proceeded by the string inks (such as links and rinks).
  • well gra?e? - Denotes any phrase beginning with the term well followed by a space and then a term that contains the string gra, followed by any character, followed by the letter e, followed by any character (such as well graded and well grates).

Wildcards can be used with any kind of words or number as long as they contain at least 5 characters or numbers.  Using wildcards on words with less than 5 characters or strings with less than 5 numbers won’t be effective.

With the simple search, you cannot use leading wildcards (at the beginning of a search term). For example, *irsty or *17 would not return reliable results.