Enterprise Vault.cloud™ Advanced eDiscovery User Guide
- About Enterprise Vault Advanced eDiscovery
- Getting started with Advanced eDiscovery
- Advanced eDiscovery roles
- Investigations
- About Investigations
- About the Managed Accounts node
- Creating a label
- Performing a new search of accounts (Investigations tab)
- Saving a search of accounts (Investigations tab)
- Viewing or modifying a saved search (Investigations tab)
- Generating and exporting printable reports for searches (Investigations tab)
- Deleting saved searches (Investigations tab)
- Working with emails in the Investigations tab
- Hiding and unhiding emails
- Deleting emails permanently
- About the Mail Reassignment node
- Reassigning emails
- Viewing email reassignment status
- Canceling the email reassignment activity
- Generating a Mail Reassignment status report
- Sending notifications to the mail reassignment batch initiator
- About Collaboration
- Searching Collaboration messages during investigation
- Applying tags to Collaboration messages during investigation
- Case management
- About Targeted Collections
- Configuring Targeted Collection for Microsoft Teams
- About cases in the E-Discovery tab
- Case workflow summary: Discovery Administrator
- Customizing the case review status tags
- Creating a case
- Viewing the details of a case
- Editing a case
- Performing a new search of a case
- Saving a search of a case
- Viewing and modifying a saved search of a case
- Applying a search-level legal hold
- Assigning Research Sets to reviewers
- Generating printable reports for searches
- Searching and tagging Collaboration messages in E-Discovery
- Reviewing and working with emails in eDiscovery
- Email export
- Collaborative reports
- Advanced eDiscovery alerts
- Email Continuity
- Methods for searching cases and accounts
- Methods for searching tables and reports
- Advanced eDiscovery Frequently Asked Questions
- Best practices, limitations, and known issues
- Advanced eDiscovery updates in previous releases
Searching Collaboration messages during investigation
You can search and view the Collaboration messages if the Microsoft Teams service is enabled and the archive collector is configured for you.
To search Collaboration messages during investigation
- Select the Investigations tab, and then select the node where you want to perform the new search:
To search your own mailbox select My Mailbox > Mailbox, or select My Mailbox > Saved Searches > New Search.
To search one or more of your managed accounts select Managed Accounts > Saved Searches > New Search.
Or to search a single managed account, select Managed Accounts > Accounts and click the required account.
Perform step 2 for an Advanced Search, or step 3 for a Query Search.
- To perform an Advanced Search, do the following:
Select the Advanced Search tab.
Select the custodian archives you want to search.
To search archives of all of the custodians that are associated with the case, select All.
To search archives of the particular custodians, select Custom. Click Manage to search for, add, and remove the custodians. Click Update to complete the custodian selection.
Specify the search criteria by using the following options.
Select All to match all conditions you have provided.
Select Any to match any of the conditions you have provided.
Click + to add new search clauses, and complete a new row for each clause.
Click - to remove search clauses that are not required.
Searches are not case-sensitive. The search supports phrase search, Boolean operators, proximity search, and wildcard search.
Search for and select the message attributes you want to search. Refer to the table below:
Entire Message
Contains / Doesn't Contain
Subject
Contains / Doesn't Contain
Body
Contains / Doesn't Contain
From
Contains / Doesn't Contain
Note:
Produces search results from the From field.
To
Contains / Doesn't Contain
Note:
Produces search results from the To, BCC, and CC fields.
Has Attachment
Yes / No
Attachment Name
Contains / Doesn't Contain
Attachment Type
Contains / Doesn't Contain
Classified As
Contains / Doesn't Contain
Note:
This option is available if the Veritas Information Classifier service is enabled for your company.
Select a classification tag from the drop-down list. The list shows all the classification tags that have been applied to your company's messages in Enterprise Vault.cloud.
To see a tooltip with a classification tag's description, select the classification tag from the drop-down list and then point to the classification tag.
Date Sent (AND)
Is Equal To / Before / Before (Incl.) / After / After (Incl.)
From / To
Contains / Doesn't Contain
Note:
This option produces search results from the From and To fields.
Inbound Message (AND)
Yes / No
Outbound Message (AND)
Yes / No
Is Hidden
Yes / No
IP Header
Contains / Doesn't Contain
- To perform a Query Search, do the following:
Select the Query Search tab.
Select the custodian archives you want to search.
To search archives of all of the custodians that are associated with the case, select All.
To search archives of the particular custodians, select Custom. Click Manage to search for, add, and remove the custodians. Click Update to complete the custodian selection.
Specify the search query by providing keywords.
- Click Search.
The search result appears as shown in the following sample image.
- Click Save Search.
