Enterprise Vault™ Discovery Accelerator Reviewer's Guide
- Introducing Discovery Accelerator
- Searching for items
- Manually reviewing items
- About reviewing with Discovery Accelerator
- Searching within the review set
- Deleting items from Enterprise Vault archives
- Working with research folders
- Exporting and producing items
- Creating and viewing reports
- Appendix A. Enterprise Vault properties for use in Discovery Accelerator searches
Performing an export or production run
If you want to review items offline or present them in evidence to a third party, you must export them from Discovery Accelerator. There are several output formats from which to choose, including PST, Domino NSF database, HTML, MSG, and ZIP. Export to HTML if you want to export both the item itself and its action status history. This history identifies the reviewers who displayed a preview or printable version of the item, downloaded the original version of the item, or marked it, and the date and time at which they did so.
As well as exporting the selected items, Discovery Accelerator also outputs some reports in HTML, plain-text, and XML formats. All three reports list the items that you have exported, and the HTML report provides hyperlinks to the items.
You must have the Production permission to produce or export items.
To perform an export or production run
- Click the Cases tab in the Discovery Accelerator client.
- In the left pane, click the case from which you want to export items.
If Discovery Accelerator lists a lot of cases, you can filter the list with the fields at the top of the pane. As well as filtering the cases by name, you can choose whether to list any research folders that are associated with them.
- Click the Export/Production tab.
- Click New at the top of the window.
The Export Details pane appears.
- In the Name box, type a name for the run.
The name that you specify here becomes the name of the subfolder in which Discovery Accelerator stores the output from the run.
- In the Output folder box, type the path to the folder on the Discovery Accelerator server in which you want to store the output from the run.
The folder path can contain up to 100 characters.
Discovery Accelerator places the output from the run in a subfolder of the nominated folder.
- Choose whether to produce or export the selected items.
If you select Production, a Production Details box appears in which you can set the ID prefix and starting sequence number for the production. You may have set this when you created the case, but you can change it here. The prefix can contain up to 10 characters, but it cannot include space characters or symbols such as \ / * ? | < and >.
- In the Items Selection box, choose the items that you want to export.
The options are as follows:
Item ID
Specifies the ID of an individual item that you want to export. To determine the ID of an item, view the item in the Review pane.
Original source
Selects items by their type, such as Microsoft Exchange, Teams Channel, or Teams Chat.
Policy action
Selects items by the policy action with which your policy management software has tagged them.
This action can be one of the following: Inclusion (demands or suggests capture), Exclusion (precludes capture or advocates non-capture), and No Action (the item is subject to normal random sampling).
Items
Specifies whether to export all the items in the review set or only those items that are assigned to you.
Search
Selects items that the specified search has captured.
Mark
Selects items by the mark that reviewers have assigned to them.
Last marked by
Selects items by the person who last assigned a review mark to them.
Current status
Selects items by their status, such as Pending, Questioned, or Reviewed.
Policy
Selects items by the specific policy with which your policy management software has tagged them.
- In the Options box, select Exclude duplicate items or Exclude similar items, if required. Discovery Accelerator considers items to be duplicates when they have exactly the same content. The items that Discovery Accelerator considers to be similar have the same metadata properties, such as their author display names, subjects, and number of attachments.
The option to exclude duplicate items is available only in cases that you have enabled for analytics. The option to exclude similar items is available only in cases that you have not enabled for analytics.
For more information on the deduplication features in Discovery Accelerator, see the Accelerator Deduplication white paper.
- Select Include journal recipients in reports if you want the export reports to include recipient information from the journal envelope (P1) of Exchange or SMTP journal items. This lists all the recipients of each item, regardless of their placement in the To, CC and BCC fields.
Discovery Accelerator does not include recipient information from Domino journal items.
- Choose whether to export the items in their original format, as HTML, or collected in a ZIP file.
For Domino: If you click Original Type, you can choose to output items in their native format: Domino items as NSF files.
For Microsoft Exchange: If you click Original Type, you can choose to output items in their native format: Microsoft Exchange items as individual MSG files, SMTP items as individual EML files, and so on. Depending on the selected message types, you may also be able to encapsulate all the exported items in a single Personal Folders (PST) file.
If you click PST, Discovery Accelerator displays some additional options with which you can set a password and a maximum roll-over size for the file. The password can contain alphanumeric characters only. The default size of each PST file is 600 MB, and it cannot exceed 20 GB.
With the EML to MSG conversion option selected, the export will convert EML messages to MSG messages and then add them to one or more PST files, depending on the number and size of the messages. After a successful export run, the contents of the PST file(s) can be natively previewed in Microsoft Outlook. EML to MSG conversion is available for IMAP, SMTP, Instant Messaging, Teams Chat and Channel messages, Fax, and Bloomberg message types.
Caution:
The EML to MSG conversion is a time-consuming process. The time taken can be minimized by planning the export runs in batches. During testing of the EML to MSG conversion, export rates of approximately 10,000 messages per hour were seen, based on an average message size of 300KB. This estimate may be conservatively used to plan exports batch runs, so they complete within an acceptable time frame.
Note:
If the EML file is an RMS-protected item, contact the Discovery Accelerator administrator to obtain the decrypted version of the file.
If you click HTML, Discovery Accelerator displays some additional options with which you can choose to include comments and action status history. This history identifies the reviewers who displayed a preview or printable version of each item, downloaded the original version of the item, or marked it, and the date and time at which they did so.
If the original version of the item is RMS-protected, make sure that you select the Attachments check box when exporting the item. Otherwise, Discovery Accelerator exports only the cover note and not the actual decrypted email message.
If you click Zip, you can set a maximum roll-over size for each ZIP file. The default is 1024 MB (1 GB).
You can export all types of items to a ZIP file. However, if you choose to export Domino items, Discovery Accelerator collects them first into a Domino NSF database and then adds this to the ZIP file.
If the EML file is an RMS-protected item, contact the Discovery Accelerator administrator to obtain the decrypted version of the file.
When you export archived SMTP journal emails, only the original email (P2 email) is exported. If you wish to export the journal envelope information (P1 envelope), select the Include journal envelope In addition to the original email checkbox. Previewing the journal envelope information in a PST file displays the envelope contents with the actual message as an attachment.
Note:
The ability to export the journal envelope information (P1 envelope) is not supported if you have selected the Export as HTML option.
- For Domino: In the NSF size (MB) box, type the required size of the export file.
Discovery Accelerator allows NSF rollover while exporting Domino items into NSF files. An administrator can configure the size of the NSF file in MB beyond which it will be rolled over. The maximum size for rollover is 65535 MB.
- Select the Export MS Teams messages to option to export Microsoft Teams messages. Each Microsoft Teams message will be exported in Microsoft-provided JSON file format.
Note:
Multiple MS Teams messages can be part of an item; however, a separate JSON file is created for each MS Teams message
- In the Number of items to export box, type the required number of items. Note that Discovery Accelerator exports the oldest items. For example, if you choose to export 100 items, Discovery Accelerator exports the 100 oldest items that match the selected options.
If you have chosen to exclude duplicate items or similar items, they do not count towards the number of exported items. Discovery Accelerator exports the specified number of unique items only.
- If you are exporting file system items or Domino items and want to make them read-only so that they cannot be changed or accidentally deleted, select Read Only.
- Click Apply.
- When the run has finished, open the output folder on the Discovery Accelerator server to retrieve the exported items. This folder also includes the reports that list the items that you have exported.