Additional Criteria in Case Manager

You can use keywords and other criteria to specify what data is collected for a case.

Keyword

Use the Keyword box to filter data by keywords. For email data, only emails that contain the keywords in the subject, body, or attachments are included in the case.

Add Criteria

Use the Add criteria list to filter data by other criteria. The criteria that are available depend on the value you select from the Data type list.

For criteria that allow multiple values, separate the values with a semi-colon (;) or a comma (,), and then select a logical operator.

Criteria Available for Email Data

• Discovery

  • Domain users

  • Files accessible by

  • User groups

• Email

  • Attachment name: Search by the name of the email attachment. Logical operators: OR or NOT.

  • BCC: Search by email addresses that appear in the BCC field. Logical operators: AND, OR, or NOT.

  • CC: Search by email addresses that appear in the CC field. Logical operators: AND, OR, or NOT.

  • Email address: Search by email addresses that appear in the To, From, BCC, or CC fields. If the email address is part of a distribution group email alias, the search includes email messages that have the email alias in the To, From, or CC fields. Logical operators: AND, OR, or NOT.

  • Folder: Search a mailbox folder using an exact path, a term in the path, or a pattern in the path.

  • From: Search by the name of the sender. Logical operators: OR or NOT.

  • Has attachment: Search for email messages that have attachments.

  • Received time: Search email messages based on the time that the messages were received. You can enter only one received time.

  • Size (in KB): Search by the size of the email message. You can enter a range.

  • Subject: Search by the subject of the email message. Logical operators: AND, OR, or NOT.

  • To: Search by the name of the receiver. Logical operators: AND, OR, or NOT.

• Query builder

  • Raw query: When you perform a search with the query builder, keywords are not highlighted in the search results.

    By default, the maximum number of Boolean clauses that a query can have is 1024.

• Search options

  • Language: You can select the language (Chinese simplified, English, or Japanese) of the data you want to return in the search results list.

Criteria Available for Files

For criteria that allow multiple values, separate the values with a semi-colon (;) or a comma (,), and then select a logical operator.

• Discovery

  • Domain users

  • Files accessible by

  • User groups

• Files

  • Folder: You can provide the path of the folder. Logical operators: AND, OR or NOT.

  • Modified Date: You can provide the modification date for the file. You can either type the date in the box or select it from the calendar. Logical operator cannot be applied on this field as you can provide the modification date for only one file.

  • File name part: You can search data by specifying file name or wildcard pattern (for example: *.doc, *.pdf, etc.). Logical operators: AND, OR or NOT.

  • Size (in KB): Search by the size of the files. You can enter a range.

• Query builder

  • Raw query: When you perform a search with the query builder, keywords are not highlighted in the search results.

    By default, the maximum number of Boolean clauses that a query can have is 1024.

• Search options

  • Language: You can select the language (Chinese simplified, English, or Japanese) of the data you want to return in the search results list.