Search and Tagging
In Advanced eDiscovery, the Search and Tagging module enables you to search, preview, and organize the documents in your case. Currently, this module is in beta. For a brief demonstration of searching and tagging, see the Manage your data with Advanced eDiscovery video.
Advanced eDiscovery requires an Office 365 E3 with the Advanced Compliance add-on or an E5 subscription for your organization. If you don't have that plan and want to try Advanced eDiscovery, you can sign up for a trial of Office 365 Enterprise E5.
Search the documents in your case
After you have processed documents in an Advanced eDiscovery case (and optionally run the Analyze or Relevance module), you can use the Search and Tagging to search documents and then organize them by applying case-specific tags (also called labels). You can define a search query using the provided condition cards or by using a KQL-like query language in the Keywords condition card. Common KQL syntax, such as AND, OR, NOT, and NEAR(n) are supported, as well as trailing multi-character wildcard (*).
The following table lists the properties that you can search for using a KQL keyword query. Alternatively, you can use a condition card for in the Advanced eDiscovery Search tool to add a condition (for selected properties) to a search query.
||The name of the tag created/applied when a document is tagged.
||The custodian associated with a document; subject to limitations.
||Sent date for email; the modified date for site documents.
||The File ID within the case.
||The native file extension.
||Email, document, or attachment.
||The sender for email; the author for site documents.
||The size of the file in KB.
||The subject for email; the title for site documents.
||The Bcc field of an email.
||The Cc field of an email.
||The email address of all participants in an email thread, including for missing links.
||The date an email was received.
||Recipients of an email, included on the To, Cc, or Bcc fields.
||The sender of an email.
||The last modified date of a site document.
||The sent date of an email.
||The recipient listed in the To field of an email.
||The author of a site document.
||The title of a site document.
||The dominant theme of an item.
||Themes that are associated with an item.
||The read percentile of an item, for the issue defined by [issuenum].
||The relevance score of an item, for the issue defined by [issuenum].
||If an item has been manually tagged for relevance, the tag defined by [tagname].
* Only available if the Themes module has been run.
** Only available if the Relevance module has been run.
Alternatively, you can use a condition card in the Advanced eDiscovery Search tool to add a condition (for selected properties) to a search query. The following screenshot shows the conditions that can be added to a query. The Group column indicates whether the property applies to email, site documents, or both (indicated by the value Common). This column also identifies the searchable properties that are available after you run the Relevance module.
For more information about searchable properties, see Keyword queries and search conditions.