1. Support
  2. Knowledge base
  3. 100014765

Compliance Accelerator(CA) gets no hits whilst running searches against the content within attachments

Article: 100014765
Last Published: 2017-08-01
Ratings: 0 0
Product(s): Enterprise Vault

Problem

In the CA client, running a search against the content of an attachment gets no hits even though the item has been successfully indexed.

For example, an email has an word document attached which contains the string as "ABCDEFG" and it's sent to the user called "User1" which is a member of the Monitored Employees of the department. Once the journal report of this message has been archived and indexed, an Ad-Hoc search with following criteria is performed in the CA client:

Name: Test Search

Search Type: Immediate

Include items already in review

Date range: Today

Authors and recipients: The department <== internal AND/ OR External to organization 

Search terms: 

 Content (Any of):  ABCDEFG

Attachment: Does not matter

Archives To Search: the journal archive contains the archived item

 

When the search completes no hits are returned. 

Error Message

A DTRACE of the EVIndexQueryServer process shows the following query:

(EVIndexQueryServer) <13816> EV-M {QUERYTRACER.EN_US} [Search 2041] [1/1] Velocity query:|<?xml version="1.0" encoding="utf-16"?>|<operator xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" logic="and">|  <operator logic="and" xmlns="urn:/velocity/objects">|    <operator logic="and">|      <term str="209" field="_KVSCA.DeptRecips" />|      <operator logic="range">|        <term str="2014-12-11T16:00:00Z" field="date" />|        <term str="2014-12-12T15:59:59Z" field="date" />|      </operator>|      <operator logic="range">|        <term str="0" field="anum" />|        <term str="0" field="anum" />|      </operator>|      <operator logic="or">|        <term str="2" field="_Vault.MsgDirection" />|        <term str="1" field="_Vault.MsgDirection" />|        <term str="0" field="_Vault.MsgDirection" />|      </operator>|      <operator logic="and">|        <operator logic="not">|          <term str="EXCLUDE" field="_Vault.PolicyAction" />|        </operator>|      </operator>|      <operator logic="range">|        <term str="1" field="snum" />|        <term str="2147483647" field="snum" />|      </operator>|    </operator>|    <operator logic="and">|      < term str="ABCDEFG" field="cont" />|      <operator logic="range">|        <term str="1" field="snum" />|        <term str="2147483647" field="snum" />|      </operator>|    </operator>|  </operator>|</operator> 
 
The field mapping of "cont" indicated above means the search is only performed on the top-level of the item without searching the attachment(s). For more details, please refer to the related article below.

Cause

In the CA Client's Configuration tab, Settings sub-tab, Search section is a hidden configuration option for searches named Use Filtered Search. This option controls if top level documents and attachments or just top level documents are searched.  By default, this option is set to enable searching the top level documents as well as the contents of attachments to that document.  The Use Filtered Search option is controlled by a checkbox in the Value column of the option's row.  When unchecked, the behavior of searches with attachments is changed to search only the top level documents and not the contents of attachments.
 

Solution



To re-enable the ability to search attachments as well as top level documents:

  1. Launch the CA Client using an account with the application level permissions of Modify System Configuration and View System Configuration.  These permissions are granted by default in the Compliance System Admin role which should be assigned to the Vault Service Account and can be assigned to any other Monitored Employee account as appropriate.
  2. Click on the Configuration tab.
  3. Click on the Settings sub-tab.
  4. Hold the Ctrl key down while clicking on the banner where it has Configuration Settings to make the hidden settings visible.
  5. Expand the Search section.
  6. Scroll down the list of options to find and select the Use Filtered Search option.
  7. Click on the check box in the Value column of this option to place a check mark in it.
  8. Click the Save button in the lower right of the page to save the change.
  9. Click the OK button in the pop-up dialog box that will appear to acknowledge the need to restart the Customer Background Tasks.
  10. Close the CA Client.
  11. Log onto the CA server as the Vault Service Account.
  12. Restart the Customer's Background Tasks as follows:
    1. Launch Internet Explorer to the EVBAAdmin site (https://localhost/EVBAAdmin).
    2. If needed, expand the left panel contents to show the CA customer(s) below the CA server name.
    3. Select the CA Customer in the left panel to view its properties in the right panel.
    4. Right click on the CA Customer in the left panel to show the available options.
    5. Click on the Customer's Background Tasks option.  Note that there will be a check mark to the left this option.
    6. Look in the right panel to view the Current Status section's Customer's tasks: field information as it changes from Running to Stopping to Stopped.
    7. Right click on the CA Customer in the left panel to show the available options again.
    8. Click on the Customer's Background Tasks option again.  Note that there will not be a check mark to the left of this option this time.
    9. Look in the right panel to view the Current Status section's Customer's tasks: field information again as it changes from Stopped to Starting to Running.
    10. After the status is Running, close IE and resume operations as normal as the searches will now include the contents of attachments.

 

Was this content helpful?

Article Languages