Enterprise Vault.cloud™ Advanced eDiscovery User Guide
- About Enterprise Vault Advanced eDiscovery
- Getting started with Advanced eDiscovery
- Advanced eDiscovery roles
- Investigations
- Case management
- Reviewing and working with emails in eDiscovery
- Email export
- Collaborative reports
- Advanced eDiscovery alerts
- Email Continuity
- Methods for searching cases and accounts
- Methods for searching tables and reports
- Advanced eDiscovery Frequently Asked Questions
- Best practices, limitations, and known issues
- Advanced eDiscovery updates in previous releases
Searching and tagging Collaboration messages in E-Discovery
You can search and view the Collaboration messages if the Microsoft Teams service is enabled and the archive collector is configured for you. For Collaboration feature overview, See About Collaboration.
To search Collaboration messages during investigation
- In the E-Discovery tab, Select Administration > Cases > Case List.
- Search for and select the case in which you want to search Collaboration messages.
- In the E-Discovery tab, Select Case > Saved Searches > Case List.
- To initiate a new search, , select Saved Searches > New Search.
Alternatively, to search in the existing research set, expand Research Set, and select the set you want.
- To perform an Advanced Search, do the following:
Select the Advanced Search tab.
Select the custodian archives you want to search.
To search archives of all of the custodians that are associated with the case, select All.
To search archives of the particular custodians, select Custom. Click Manage to search for, add, and remove the custodians. Click Update to complete the custodian selection.
Specify the search criteria by using the following options.
Select All to match all conditions you have provided.
Select Any to match any of the conditions you have provided.
Click + to add new search clauses, and complete a new row for each clause.
Click - to remove search clauses that are not required.
Searches are not case-sensitive. The search supports phrase search, Boolean operators, proximity search, and wildcard search.
Search for and select the message attributes you want to search. Refer to the table below:
Entire Message
Contains / Doesn't Contain
Subject
Contains / Doesn't Contain
Body
Contains / Doesn't Contain
From
Contains / Doesn't Contain
Note:
Produces search results from the From field.
To
Contains / Doesn't Contain
Note:
Produces search results from the To, BCC, and CC fields.
Has Attachment
Yes / No
Attachment Name
Contains / Doesn't Contain
Attachment Type
Contains / Doesn't Contain
Classified As
Contains / Doesn't Contain
Note:
This option is available if the Veritas Information Classifier service is enabled for your company.
Select a classification tag from the drop-down list. The list shows all the classification tags that have been applied to your company's messages in Enterprise Vault.cloud.
To see a tooltip with a classification tag's description, select the classification tag from the drop-down list and then point to the classification tag.
Date Sent (AND)
Is Equal To / Before / Before (Incl.) / After / After (Incl.)
From / To
Contains / Doesn't Contain
Note:
This option produces search results from the From and To fields.
Inbound Message (AND)
Yes / No
Outbound Message (AND)
Yes / No
Is Hidden
Yes / No
IP Header
Contains / Doesn't Contain
- To perform a Query Search, do the following:
Select the Query Search tab.
Select the custodian archives you want to search.
To search archives of all of the custodians that are associated with the case, select All.
To search archives of the particular custodians, select Custom. Click Manage to search for, add, and remove the custodians. Click Update to complete the custodian selection.
Specify the search query by providing keywords.
- Click Search.
The search result appears as shown in the following sample image.
The application displays Chat and Channel messages for your review.
- Select the message, and click Tag.
- On the action menu, Click Tag.
- In the Add Tag dialog box, enter a tag name and if required, provide your comments.
- Click Tag.