Advanced Search lets you combine several fields and conditions to find exactly the emails you need, even across millions of archived messages. For a quick keyword search, see How to Perform a Simple Search.

Open Advanced Search

1. Go to the Search section.
2. Click the Email tab at the top of the page to open the search panel.
3. Open the Advanced Search tab.

The Social, File and Website tabs (if your account archives them) open straight into the same block builder, with the fields that apply to those items.

Set the date range

Click the Range field and either pick a preset (Today, Yesterday, Last 7 Days, Last 14 Days, Last 30 Days, Last 90 Days, This Year, Last Year) or set your own From Date and To Date. The default is Last 14 Days.

• Change months with the single arrows, and years with the double arrows.
• Turn on Forever under From Date to start from the oldest archived email, or under To Date to include everything up to the most recent one.
• Use From-To Times or Between Times to limit the search to certain times of day.

Click Apply to use the range. The dates refer to when the emails were sent. You can read more in How to Use Calendar in Search Flow.

Next to the range, Search For lets you choose which types of items to include (Emails, WhatsApp, SMS). All types are selected by default.

Build your search

A search is made of blocks, and each block contains one or more fields. Each field has three parts:

1. What to search — for example Subject, From or Message Size (KB).

2. The condition — for example Contains Phrase or Contains Any. The conditions depend on the field you picked.

3. The keyword or value to look for. Text conditions need at least 3 characters.

To add more criteria:

• Click + Add Field to add another field to the same block. Fields in the same block are combined with AND, so an email has to match all of them.
• Click Add Block to add an alternative. Blocks are combined with OR, so an email has to match at least one block.
• Use the trash can icon to remove a field, and Remove Block to remove a block.

You can add up to 10 blocks, with up to 10 fields in each.

For example, this search finds emails whose subject contains "council" and that have at least one attachment, or whose body contains "village":

Run the search and sort the results

Click Search. The number of results is shown above the list, and you can click any email to open it in the reading pane.

Results are sorted by date, newest first. Click Sort By to sort by From, To, Subject, Date or Size, in either direction.

The icons next to Search let you save the search (Save this search), create a retention tag from it (Create Retention Policy) or clear it (Reset Search).

If you manage several mailboxes, use the Mailboxes selector in the search panel to choose which ones to search.

Search fields

• From — the sender's address or name
• Sender — the actual sender, if an alias was used in From
• To, CC, BCC — the recipients in that field
• Senders (From, Sender) — From and Sender together
• Recipients (To, CC, BCC, Distribution Group) — all recipients, including distribution group members
• Mailbox (From, Sender, To, CC, BCC, Distribution Group) — all senders and recipients
• Distribution Group Recipients — recipients who are part of a distribution group
• Non-Standard Headers — non-standard email headers
• Subject, Body — the email's subject or body
• Message (Subject, Body, Attachment) — the subject, body and all attachments, including file names and the text inside attachments (even zipped ones)
• Attachment — attachment names and the text inside attachments
• Conversation — emails exchanged between two participants, in either direction. Enter both email addresses or phone numbers; there's no condition to choose.
• Message Size (KB), Attachment Size (KB) — size in kilobytes (numbers only)
• Attachment Number — the number of attachments (numbers only)
• Direction — Internal (sent from and to your company's domains only), Incoming (sent from outside your company) or Outgoing (sent from your company to at least one outside address)
• Tags — emails with (or without) specific tags
• Type — Bloomberg, Calendar, Google Chat, SMS / MMS, Voice Message, WeChat or WhatsApp
• Notes — emails with or without notes, or with a phrase in their notes
• Folder — emails in specific folders synced with Outlook
• Message ID — the email's Message ID, including the < and > around it (for journaled emails, the ID from the envelope)
• Email ID — the Jatheon Email ID, shown in the single-email view and in the Audit Logs

Some fields only appear if your account or role has them, and the list changes with your Search For selection.

Field conditions

• Contains Phrase / Does Not Contain Phrase — all the words, in exactly the order you typed them (or not)
• Contains All — all the words, in any order
• Contains Any — at least one of the words
• Does Not Contain Any — none of the words
• Proximity Search — two or more words within a set number of words of each other (Subject, Body, Message, Attachment)
• Starts With, Contains Exactly (case-insensitive), Is Empty — Subject only
• Filename Contains / Filename Does Not Contain, Content Type Is / Content Type Is Not (Text, Image, Audio, Video, Application, Other) — Attachment only
• Contains Keywords from Keyword List / Does Not Contain Keywords from Keyword List — use one of your saved keyword lists instead of typing keywords
• Contains Special Number — a Phone Number, Credit Card Number or Social Insurance Number (SIN or SSN) (Subject, Body, Message, Attachment)
• Fewer Than / More Than — for Attachment Number, and for the number of addresses in the sender and recipient fields. The comparison is strict: to find emails with 3 or more recipients, use More Than 2.
• Smaller Than / Larger Than — Message Size and Attachment Size
• In Group — emails of users in one of your groups (sender and recipient fields)
• Is / Is Not — Direction, Type and Folder
• Is — Message ID and Email ID
• Contains All Tags, Contains Any Tags, Does Not Contain All Tags, Does Not Contain Any Tags, Is Empty — Tags
• Contains Phrase, Contains Any Note, Doesn't Contain Any Note — Notes