Filter Options for Case Manager

When collecting data in a case, you can filter the collected case data to increase the relevancy of data returned in search results.

The following filter options are available:

  • Keyword

    Use this field to filter data in the case by keywords. For email data, only emails that contain the specified keywords in the subject, body, or any attachments will be included in the case.

  • Recipients/Users

    Select this option to filter data based on the following criteria:

    • For email data, filter based on email addresses in the recipients (to, from, cc, bcc) fields.

    • For file system data, filter based on the users who have access to the files.

    You can also use this filter to collect email data from deleted Active Directory users or external email addresses. See Collecting Data from Deleted or External User Accounts.

  • Recipient Groups/User Groups

    Select this option to filter data based on the following criteria:

    • For email data, filter based on email groups in the recipients (to, from, cc, bcc) fields.

    • For file system data, filter based on user groups who have access to the files.

    • Expand

      When the Recipient Groups / User Groups filter is selected, only data that contain the exact email group address or user group that you specify will be included in the case. You can select Expand to include data that contain any of the individual email addresses or user names of the specified groups.

  • Email Received Time

    Select this option to filter email data based on when the email was received. Only emails that were received within the specific date range will be included in the case.

    • From

      Use this option to select the start date for the Email Received Time filter.

    • To

      Use this option to select the end date for the Email Received Time filter.

  • Sampling Rate

    Select this option to specify the sample size of data that you want to return in search results.

    Note

    When the Sampling Rate filter is selected, only a portion of the total matching results (a sample) will appear in the search results list. Given a specified sampling rate value (r), and the total possible results of a search (t), then the calculation used to determine the sample size (s) is:

    r2 ÷ 10,000 x t = s

    For example, if you entered a sampling rate value of 70, and the total number of possible results for a search is 50,000, then the sample size would be:

    702 ÷ 10,000 x 50,000 = 24,500

    So 24,500 search results out of a total of 50,000 possible results would appear.

  • Language

    Select this option to specify the type of writing system (English, Chinese, Japanese, or Korean) used in the case data. If your data contains non-English characters, you must select the Language filter.

  • File Modified Time

    Select this option to filter file system data based on a range of date-times for the last modified time.

  • File Size (in KB)

    Select this option to filter file system data based on a range of file sizes. Enter the range of file sizes in kilobytes (KB).

  • File Name

    Select this option to filter file system data based on keywords included in the file system name.

Loading...