How to Use Advanced Search in Jatheon cCore (Legacy Interface)

Affected software version: 1.1.26 and up
Role: End User, Compliance Officer

You can use Advanced Search to find any emails that are archived. If you know two or more bits of information about a specific email you’re looking for, Advanced Search allows you to find it among millions of other emails in a matter of seconds. This functionality contains various fields with lots of different conditions to choose from. Some fields, if similar, will share the same conditions, whereas others will have completely unique conditions. The following picture explains what constitutes a field, a field condition and a keyword.

Jatheon cCore Advanced Search diagram showing a field, a field condition and a keyword

Advanced Search Location

After logging in, you'll see the Simple Search section of the system (default view after login). Click on the Advanced Search tab.

Jatheon cCore Simple Search view with the Advanced Search tab

After you’ve clicked on the Advanced Search tab, you’ll see the Advanced Search page with all its options:

Run Search
Save Search
From
To
AND/OR buttons
+ Search Field
+ Add Search Block
Cancel X icon
Search Block Container

Jatheon cCore Advanced Search page with Run Search, Save Search, From/To, AND/OR and search block options

Using Advanced Search

From/To

Allows you to filter the time period

Block Container

By default, only one block container will be displayed with Message as pre-selected field and Contains All as the default condition. You can add more block containers by clicking on +Add Search Block. Alternatively, you can add more search filters/fields to an existing block container by clicking on +Search Field.

Keyword

The third section in the block container is always the keyword field. Note that some fields are text boxes while some are drop-down menus with predefined values.

Save Search

This option is very useful once you have set up your search the way you want it and if you plan to use that same search in the future again. To avoid doing it all over again every time, just click on the Save Search button. A small pop-up will appear asking you to name your saved search. Click Save. Please note that the system does not allow saved searches with the same names.

Run Search

Once you have set up your search the way you want it, just click on this button and it will open the Search Results page/tab with emails/messages displayed in a list.

X icon next to a keyword

This icon will remove the field, condition and keyword entirely with all its data.

X icon next to a block container

This icon will remove the entire block container with all its data.

AND/OR buttons

They will be grayed out by default, but once you add one more field to search within the same block container, they will become available for use.

AND means that search will display only emails that contain all of the specified requirements within a search block. Any emails/messages that lack one or more fields/conditions will not be displayed. For example, if you search: FromJohn To Nikola, Body Text, you’ll only see emails/messages that have John as the sender, Nikola as the recipient, with text in the email body.

OR means that search will display any emails containing at least one of the criteria specified in the block container. Even if the email contains all three fields, on the search results page you’ll see any emails that meet at least one of the search criteria: John as the sender, or Nikola as the recipient, or Text in body of email.

Search Fields

This is the list of all search fields. Under this list you’ll find detailed explanation of every field itself with its first default condition. Some fields can search for only one section of an email/message, while other fields may search for more.

From
To
Cc
Bcc
Hidden
Recipients
Recipients/Sender
Subject
Body
Message
Attachment
Conversation
Message Size (KB)
Attachment Size (KB)

Jatheon cCore Advanced Search list of search fields

From

This field will search for the Sender of email/messages and nowhere else. It can be a single word, first name or last name, an entire email address or domain or different combinations. Here you can see what was used as the keyword for From field and what will be displayed and highlighted on the search results page/tab.

Jatheon cCore search using the From field, with the keyword highlighted in search results

To

This field will search only in Recipient(s) of emails/messages in To section and nowhere else. It can be a single word, first name or last name, an entire email address or domain, or different combinations. Here you can see what was used as the keyword for To field, and what will be displayed and highlighted on the search results page/tab.

Jatheon cCore search using the To field, with the keyword highlighted in search results

Cc

This field will search only for Recipient(s) of emails/messages that was/were added in the Cc section and nowhere else. It can be a single word, first name or last name, an entire email address or domain or different combinations. Here you can see what was used as the keyword for Cc field, and what will be displayed and highlighted on the search results page/tab.

Jatheon cCore search using the Cc field, with the keyword highlighted in search results

Bcc/Hidden

These fields will search only for Recipient(s) of emails/messages that was/were added in the Hidden/ Bcc section (Blind Carbon Copy) and nowhere else. It can be a single word, first name or last name, an entire email address or domain or different combinations. Here you can see what was used as the keyword for Hidden/Bcc fields and what will be displayed and highlighted on the search results page/tab. Depending on your email server setup/type and email types that are being processed, you can use the Hidden or Bcc option to search for hidden recipients.

Jatheon cCore search using the Hidden/Bcc fields, with the keyword highlighted in search results

Recipients

This field will search for all recipients of email/messages that were added in any of the following sections: To, Cc, Bcc or Hidden. Your query can be a single word, first name or last name, an entire email address or domain or different combinations. Here you can see what was used as the keyword for Hidden field, and what will be displayed and highlighted on the search results page/tab.

Jatheon cCore search using the Recipients field, with the keyword highlighted in search results

Recipients/Sender

This field will search for Sender and Recipient(s) of email/messages that were added in any of the following sections: From, To, Cc, Bcc and Hidden. Your query can be a single word, first name or last name, an entire email address or domain or different combinations. Here you can see what was used as the keyword for Recipients/Sender
field, and what will be displayed and highlighted on the search results page/tab.

Jatheon cCore Advanced Search by Recipients/Sender keyword with matches highlighted in results

Subject

This field will search only in the Subject section of emails/messages and nowhere else. Your query can be a single word or more words, first name or last name. It can also contain numbers, special characters or any combinations. Here you can see what was used as the keyword for Subject field, and what will be displayed and highlighted on the search results page/tab.

Jatheon cCore Advanced Search by Subject keyword with matches highlighted in results

Body

This field will search only in the Body section of emails/messages and nowhere else. Your query can be a single word or more words, first name or last name. Here you can also use numbers, special characters or any combinations. Here you can see what was used as the keyword for Body field, and what will be displayed and highlighted on the search results page/tab.

Jatheon cCore Advanced Search by Body keyword with matches highlighted in results

Message

This field will search in 4 sections of an email/message: Subject, Body, Attachment (File name and Data/Text inside of attachment file). Your query can be a single word or more words. Here you can also use numbers, special characters or any combinations. Here you can see what was used as the keyword for Message field, and what will be displayed and highlighted on the search results page/tab.

Jatheon cCore Advanced Search by Message keyword with matches highlighted in results

Attachment – Text/Data Inside of Attachments

This field can search in 2 sections of email/message: Attachment (File Name) and Text/data inside the attachment files, depending on the condition. Your query can be a single word or more words, letters, numbers or any combinations. In this example for Text/data inside attachments, you can see what was used as the key word for Attachment in combination with the condition, and what will be displayed and highlighted on the search results page/tab.

Jatheon cCore Advanced Search for text inside attachments with matches highlighted

Attachment – File Name

In this example of search done by Attachment File Name, you can see what was used as the keyword for Attachment in combination with condition File Name Contains, and what will be displayed and highlighted on the search results page/tab.

Jatheon cCore Advanced Search by attachment file name using the File Name Contains condition

Conversation

This field will search for both Sender and Recipient of email/messages, and it will display all data that have e.g. Scott as sender + Allen as recipient, or Allen as sender + Scott as recipient. Your query can be a single word, first name or last name, an entire email address or domain or any other combination.

Jatheon cCore Conversation search between two users in either direction

Message Size

This field is self-explanatory. In this particular example, the system will display only emails that are larger than 72 KB because we used the condition Greater Than. You can set it up in reverse manner, using the other condition – Less Than. In this field, letters or special characters are forbidden. You can use only numbers.

Jatheon cCore search for emails larger than 72 KB using the Greater Than condition

Attachment Size

This field is self-explanatory. In this particular example, the system will display only attachments that are larger than 1300 KB because we used the condition Greater Than. You can set it up in reverse manner using the other condition – Less Than. In this field, letters or special characters are forbidden. You should use only numbers.

Jatheon cCore search for emails larger than 1300 KB using the Greater Than condition

Field Conditions

This is the list of all conditions for all the fields. Under this list, you’ll find a detailed explanation of every listed condition. Most of the conditions are repeated for similar fields and they are exactly the same. Some fields, however, have unique conditions.

Contains All
Contains Any
Contains Phrase
Not Contains Any
Not Contains Phrase
Less Than
Greater Than
In Group
In OU
Not In OU
Not In Group
Has Keyword
Not Has Keyword
File Name Contains
File Name Not Contains
Is Between

Contains All

If there’s more than one keyword used, search will display only emails/messages that contain all of the specified keywords. If only one keyword is not found, that email/message will not be displayed.

Contains Any

If there’s more than one keyword used, search will display all emails/messages that contain at least one of the specified keywords.

Contains Phrase

If there’s more than one keyword used, search will display only emails/messages that have all the words in exactly the same order as specified in the query, not just anywhere in the email/message.

Does Not Contain Any

If there’s more than one keyword used, search will display only results that don't contain any of the specified keywords. If there’s only one keyword found, that email/message will not be displayed.

Does Not Contain Phrase

If there’s more than one keyword used, search will display only emails/messages that don't contain all the words used, but only if they are in exactly the same order as specified, not just anywhere in the email/message.

Less Than

With this option you have to use numbers only. If you use this option in combination with To, Cc, Hidden etc., search will display only emails that have a smaller number of recipients than specified by your keyword. The condition is just less, not equal or less. So if you’re looking for 3 recipients in To, Cc or Hidden, remember to use 4 as the keyword.

Greater Than

With this option you have to use numbers only. If you use this option in combination with To, Cc or Hidden, search will display only emails that have a higher number of recipients than specified by your keyword. The condition is just greater, not equal or greater. So if you’re looking for 3 recipients in To, Cc or Hidden, remember to use 2 as the keyword.

In Group

Group is a value that’s created in the Admin menu and allows you to assign users to specific groups. The In Group condition only appears when you search for recipients or senders of emails and messages. Searching for email address-related fields such as From, To, Cc etc. will let you use this condition. The displayed results will only include
emails/messages that contain users that belong to the specified group. You can find out which users belong to what groups in: Admin menu → User Management → Users

Jatheon cCore search for emails from users in a specified group

or in the Group section.

In OU

OU is a value that you can find in admin menu for imported users via LDAP option. This condition only appears for recipients or senders of emails/messages because they are used for users fields. For example, fields: From, To, CC etc. Search will only display email/messages that contains users with in searched OU.
You can find out what users got what OU in: Admin menu → User Management → Users.

Jatheon cCore search for emails from users in a specified OU

Not in Group

Search will only display email/messages that don’t contain users within the searched group. You can find out what users belong to what groups in Admin menu → User management → Users, and in the screenshot above (regarding Groups).

Not in OU

Search will only display email/messages that don’t contain users within the searched OU. You can find out what users belong to which OU in Admin menu → User management → Users/OU, and in the screenshot above.

Has Keyword

Keyword is a value that must be previously created using a word list, and only then will it appear in Advanced Search as a proper field condition. You can find and create keywords in: Main Search Menu → Search → Keyword List. Search will display any email/messages that contain any of the words from the word lists for the specified Keyword.

Jatheon cCore Advanced Search using a Keyword List as a field condition

Does Not Contain Keyword

Search will display email/messages that do not contain any of the words from the word lists for the specified Keyword.

File Name Contains

This option only appears for Attachment search criteria. Search will display only emails that have an attachment, but only with the specified file name.

File Name Does Not Contain

This option only appears for Attachment search criteria. Search will display only emails that have an attachment but not with the specified file name.

Is Between

This option only appears for Conversation search criteria. Search will display only emails that have the sender and recipients repeating in sender or recipients sections of email/messages. It will search into From and To fields.