Search <book_title>...

Veritas Alta™ eDiscovery User Guide

Last Published: 2023-04-17

Product(s): Veritas Alta Archiving (1.0), Veritas Alta Surveillance (1.0), Veritas Alta eDiscovery (1.0), Veritas Alta Capture (1.0)

Performing Advanced Search and Query Search

Alta eDiscovery provides the Advanced Search and the Query Search features to search the content within archived accounts and cases. Both the search features are available in the Investigations tab (where you can search your own account or the accounts that you manage) and the eDiscovery tab (where you perform searches of the custodian accounts within cases).

Advanced Search support the use of phrase search, Boolean operators, proximity search, and wildcard search. See Search syntax for Advanced Search.

Performing an advanced search

To perform an advanced search

Access the Advanced Search tab from the Investigation or the eDiscovery tab.

Specify the following inputs:

Custodians	Select All to search archives of all of the custodians that are associated with the case. Select Custom to search archives of the particular custodians. The Manage button appears. Click Manage to open the Add/Remove Custodians. Expand Selected Custodians to view the custodians selected for this search. Expand Manage Custodians and select the custodians required for this search. Click Update to add these selected custodians as a search input. These custodians are listed under the Selected Custodians section.
Custom Headers	Note: The Custom Headers option does not appear if there is no entry for a custom header for a particular group or tenant in database. Custom header does not work independently. You need to use the filter criteria to search the required items. Expand Custom Headers and set the header operator values. Click + to add new search clauses. Click - to remove search clauses that are not required. In the first column, select the required header you want to search for. Based on the data type you have selected, the operator changes. For example, if you have selected the receiver date in header, the operator values can be Between, Before inclusive and After inclusive. For a numeric or integer header value, the operator values can be Is equal to, Less than, and Greater than. If you have selected a string value in header, then the operator will be Contains. In the second column, select the available operator. In the third column, specify the text, phrase, or date that you want to search for.
Filters	Expand Filters and set the filter operator values. The operators are explained in a table below. Select All to match all conditions you have provided. Select Any to match any of the conditions you have provided. Click + to add new search clauses, and complete a new row for each clause. Click - to remove search clauses that are not required. Searches are not case-sensitive. The search supports phrase search, Boolean operators, proximity search, and wildcard search. See Search syntax for Advanced Search.

The Filter operators are listed below:

Message	Entire Message	Contains / Doesn't Contain
	Subject + Body	Contains / Doesn't Contain
	Subject	Contains / Doesn't Contain
	Body	Contains / Doesn't Contain
	Inbound Message (AND)	Yes / No
	Outbound Message (AND)	Yes / No
	Is Hidden	Yes / No
	IP Header	Contains / Doesn't Contain
Date Sent/Modified(AND)	Is Equal To	Select a date
	Before	Select a date
	After	Select a date
	Within Range	Select a date range
Participants	All Senders and Recipients	Contains / Doesn't Contain
	Senders Only	Contains / Doesn't Contain
	Recipients Only	Contains / Doesn't Contain
	To/Cc	Contains / Doesn't Contain
	To	Contains / Doesn't Contain
	Bcc	Contains / Doesn't Contain
Classification	Classified As	Contains / Doesn't Contain Note: This option is available if the Veritas Alta Classification service is enabled for your company. Select a classification tag from the drop-down list. The list shows all the classification tags that have been applied to your company's messages in Veritas Alta Archiving. To see a tooltip with a classification tag's description, select the classification tag from the drop-down list and then point to the classification tag.
Classification	Sentiment Score	Is Equal To / Below (Inc.) / Above (Inc.)
Attachment	Has Attachment	Yes / No
	File/Attachment Name	Contains / Doesn't Contain
	File Attachment Type	Contains / Doesn't Contain See Searchable attachment types.

Click Search.
You can perform a new search and optionally save it, or you can view the results of a previously saved search.

Important!

In Advanced Search, the search text input functionality is updated. In previous releases, when users were providing multiple text input with space, the default logical operator "AND" was getting applied. From now onwards, the default logical operator "OR" is getting applied to get user records.
This operator change from "AND" to "OR" is applied to all kind of searches. If users have previously used spaces while providing the search text inputs, their saved records (saved searches/standard searches/Ongoing searches) will be impacted as the operator is changed from "AND" to "OR".
Based on the selected attributes, when you export the search report, the Search Summary and Search Report is generated as shown in the sample image below.

Performing a query search

To perform query search

Access the Query Search tab from the Investigation or the eDiscovery tab.

Specify the following inputs:

Custodians

Select All to search archives of all of the custodians that are associated with the case.
Select Custom to search archives of the particular custodians.
The Manage button appears. Click Manage to open the Add/Remove Custodians.
Expand Selected Custodians to view the custodians selected for this search.
Expand Manage Custodians and select the custodians required for this search.
Click Update to add these selected custodians as a search input. These custodians are listed under the Selected Custodians section.

Query Search

Specify the search query by providing keywords.

Click Search.
You can perform a new search and optionally save it, or you can view the results of a previously saved search.