About the search criteria options

Discovery Accelerator groups the search criteria options into multiple sections, which are described below. Click the arrow icons at the right to expand or collapse the sections.

The Search section identifies the search and specifies when it runs.

Context	Identifies the case or research folder in which the search will run. When the folder is not linked to any case, "My Research" appears.
Name	Specifies a name for the search, such as "Daily Message Capture (London)".
Based on Search	Lets you select an existing search as the basis on which to set the criteria for the new search.
Save results in	If displayed, lets you select a location in which to save the results. Select "New folder in <Context>" in the drop-down list if you want to specify the details of a new folder in which to save the results. This option is available only when you create a search in a folder that is not linked to any case (you have selected "My Research" in the left pane).
Search Type	Specifies whether the search runs immediately or at a scheduled time. If you select Scheduled, you can specify a period during which the search is to run. You can also choose from one of a number of existing schedules.
Automatically accept search results	Specifies whether to add the search results to the review set automatically. This option may be useful for any proven searches that you intend to run on a regular basis. If you check Automatically accept search results, you cannot reject the results and change the search criteria. We recommend that you uncheck Automatically accept search results until you have tested that the search returns the expected results. A search that returns an error from any archive is not automatically accepted, regardless of this setting.
Include items already in review	Specifies whether the search results can include the items that you have previously captured and added to the review set. We recommend that you check this box to ensure that search information is applied to all the items.

Date range

The Date range section lets you search for items according to when they were sent or received.

Today / Yesterday / Last 7 days / Last 14 days / Last 28 days

Limits the search to items that were sent or received during the selected period. The date ranges are relative to when the search runs, which is today in the case of an immediate search.

You may find these options useful when creating a scheduled, recurrent search that runs once every day, week, two weeks, or four weeks. For example, if the search runs once a week, select Last 7 days to limit the range to the days since the search last ran.

Specific date range

Lets you search the items that were sent or received during a longer or more specific period than the other date range options permit. To enter a date, click the buttons at the right of the From and To boxes and then select the required date. Unlike the other date range boxes, a specific date range remains static and not relative to when the search runs.

Check Use Historical Information for Custodians and Custodian Groups to use both the current information and historical information for custodians and custodian groups in the search. If you uncheck this option, Discovery Accelerator uses only the current set of custodians, groups, and email addresses. Any deactivated users and groups are excluded from the search.

Since search last ran

For a scheduled search only, lets you search the new items that have arrived since the last time you ran the search. This option is similar to options such as Today and Yesterday. However, it lets you set an explicit start date for the first run of the search.

By default, this option searches from the date of the last run (or the start date for the first search) to the current day minus 1 (that is, up to yesterday).

Search terms

The Search terms section specifies the words or phrases for which Discovery Accelerator should search in items. Click Add search term to add each word or phrase for which you want to search. Note the following:

To search for a phrase, enclose the words in quotation marks.

For example, you can search for all items whose subject lines contain the phrase "organizational changes" by defining a search term like this:
```
SUBJ: "organizational changes"
```
If you type multiple words on the same line, Discovery Accelerator finds all items that contain any of the words or phrases on the line.

Note that you must separate all the words in the search term with spaces. The following search term does not return the expected results because there is no space between words the "changes" and "license" - and consequently Discovery Accelerator searches for items that contain one or more of the following words: "organizational", "changeslicense", and "agreements".
```
SUBJ: "organizational changes""license agreements"
```
Similarly, the search terms license;agreements and license; agreements differ because, in the second case, a space follows the semicolon. The presence of the space causes Discovery Accelerator to find items that contain either word, whereas the absence of the space causes Discovery Accelerator to treat the search term as a phrase.
Press the Return key in a search box to add another line to it. If you type multiple lines in a search box, choose Any of or All of in the left box to determine whether the lines are connected by OR or AND conditions.

To add the name of a target or custodian to the From box or To box, click Target at the right and then selected the required target or custodian.

Note:

If you specify as a target or custodian a Domino user whose details you synchronize with a Domino directory, you must ensure that this user has an SMTP address defined in the Domino directory. Otherwise, the search fails to find the matching items. Alternatively, you can search for such users by their display names.

Place the plus sign (+) in front of a word or phrase to connect it to every other word or phrase on the line with a Boolean AND condition. This sign instructs Discovery Accelerator to treat the specified word or phrase as required criteria. For example, the following search string means "(server AND test) OR (group AND test) OR (cluster AND test)":
```
[Any Of] server group +test cluster
```
In the following example, the search string means "(server AND test AND group) OR (cluster AND test AND group)"
```
[Any Of] server +group +test cluster
```
Place the minus sign (-) in front of a word or phrase to connect it to every other word or phrase on the line with a Boolean AND NOT condition. This sign instructs Discovery Accelerator to exclude from the result set those results that match the other search criteria and contain the excluded term. For example, the following search string means "(server AND NOT test) OR (group AND NOT test) OR (cluster AND NOT test)":
```
[Any Of] server group -test cluster
```
In the following example, the search string means "(server AND cluster AND (group AND NOT test))":
```
[All Of] server
		 cluster
		 group -test
```
You can use an asterisk (*) to represent zero or more characters, and a question mark (?) to represent exactly one character.

There must be a minimum of three characters before an asterisk, and you cannot use it at the start of a word. For example, the following search string returns hits for the words "make", "maker", "making", "wonder", "wondering", and so on:
```
[Any Of] mak*
		 Wonder*
```
Similarly, there must be a minimum of three characters between each instance of a question mark in the search string.

If it is specified in the From field, the following example finds items from users with an email address from "@acme.uk" or "@acme.hk":
```
[Any Of] @acme.?k
```
You cannot use either wildcard character after a special character, such as the ampersand (@). For example, the search string "@?cme.uk" does not produce the expected results.

Attachments

The Attachments section lets you search for items with a certain number or type of attachments.

Number

Specifies the required number of attachments. The default option, "Does not matter", means that the item can have zero or more attachments. All the other options require you to type one or two values that specify the required number of attachments.

File extensions

Specifies the file name extensions of particular types of attachments for which to search. Separate the extensions with space characters. For example, type the following to search for items with HTML or Microsoft Excel file attachments:

.htm .xls

If you specify one or more attachment types, only the attachments are searched, and not the items that contain them. For example, you cannot search for those items that have a specific word in their subject line or content and that contain a specific type of attachment.

Remember that there are attachment file formats such as Fax or Voice that do not contain text.

Miscellaneous

The Miscellaneous section lets you search for items of a certain size and type or that have the specified retention category.

Message size	Specifies the size in kilobytes of each item for which to search, as reported by the message store (Microsoft Exchange, Lotus Domino, and so on). The item size includes the size of any attachments.
Message type	Searches for items of the selected types. This option is only available if: Your Enterprise Vault server is running Enterprise Vault 5.0 or later. You have specified a date range that does not include a date before you installed Enterprise Vault 5.0.
Include only non-indexed items	Lets you search for unindexed items that do not normally appear in the search results, such as binary files and encrypted mail items. If you check this option, you must leave the Content field empty.
Retention category	Searches for items to which Enterprise Vault has assigned the selected retention categories.
Custom attributes	Searches for items to which a third-party application has added the specified custom attributes. You can configure Enterprise Vault to index items according to their associated custom attributes.

Policies

The Policies section lets you search for items according to the policies with which the Enterprise Vault Automatic Classification Engine has tagged them.

Filter by type

Lets you search for those items that the Automatic Classification Engine has tagged with particular types of policies. There are three policy types:

Inclusion. This type of policy addresses the most serious issues, such as swearing, racism, and insider trading. You would normally want to ensure that the items exhibiting any of these features were included in your review set.
Exclusion. This type of policy either precludes capture or advocates the non-capture of items. For example, spam items or newsletters may fall into this category.
Category. This type of policy does not affect the capture of items in any way; it provides a means to categorize items. For example, you can use category policies to flag those items that are in Spanish or marked as Personal.

These policy types are not mutually exclusive; you can apply multiple policies of different policy types to the same item.

Policies

Lets you search for items to which the Automatic Classification Engine has applied a specific policy.

Note:

Discovery Accelerator automatically adds to the policy list any new policies that it encounters when running a search.

Filter policies by current case

Lets you omit from the list those policies that are not in use in the current case.