Search Scenarios

Here are two common search scenarios to help get you started with LIVE EDA.

Scenario 1

This scenario involves searching for electronic communications between two different employees of the same company; one of them is terminated. As an authorized member of the legal team, your goal is to find out what precipitated a termination at a company. You have been informed that it involved employees Sue Adams and Ted Barker. Sue was terminated in 2016.

To accomplish this, you must run an electronic communications search with the following criteria:

  • Search Criteria: Search across the archive using multiple keywords and date range for two different custodians, one is terminated. We will assume that the archive you are searching includes both custodians and the items are dated back five years or more.
  • Electronic Communication Types: Emails (inbound and outbound) with attachments, chats, calendar entries, Bloomberg messages, SMTP emails (with templates).
  • Time Period: As of today's date, search back five years (April 4, 2017 to April 4, 2012).
  • Create a new case, select the archive locations to search across and the two custodians involved: Sue Adams and Jeff Charmer—see Creating New Cases.
  • Perform a quick search using the Search bar and keywords to find items that include both Sue and Jeff—see Quick Searches.
  • sue jeff
  • NOTE
    The spaces between words represent the AND operator. The result will include all keywords you enter.
  • Search the results for items dated between April 4, 2012 and April 4, 2017. Open the Search dialog box and set the Sent Date Range, Start/Received Date Range, and select all options for Item Types including: Mail, Appointment, Task, and Note.
  • Preview each item and tag the ones to investigate further, noting email subjects, terms, and individuals. Add comments to items for yourself and your team—see Previewing Documents.
  • Having identified more keywords, perform a more comprehensive search by doing one of the following:
  • Click Search > Federated Search. Enter these keywords: termination, employment, review.
  • Conduct multiple searches by cloning the Search tab and using different keywords.
  • See Federated Searches.
  • Search the results for items dated between April 4, 2012 and April 4, 2017. Open the Search dialog box and set the Sent Date Range, Start/Received Date Range, and select all options for Item Types including: Mail, Appointment, Task and Note.
  • Review the results, examining each item carefully. There may be a few that relate to your suit, so tag them as Relevant—see Tagging and Commenting Documents.
  • Perform an advanced search. Click Search > Advanced Search. Run a federated search. Add one or more rules to the Common and Tag groups—see Advanced Search.
  • Export items for your suit—see Exporting.

Scenario 2

This scenario requires you to run an electronic communications search for one custodian (sent and received) in order to preview results, then export to send to the End user for final disposition. As an authorized member of the legal team, you must run an electronic communications search for one custodian (sent and received) in order to preview results, then export to send to the End user for final disposition.

  • Time Period: As of today's date, search back 10 years (April 4, 2017 to April 4, 2007).
  • Electronic Communication Types: Emails (inbound and outbound) with attachments, chats, calendar entries, Bloomberg messages, SMTP emails (with templates).
  • Use the following Keywords and Phrases: (Text - Name) OR (Text - Firm ) OR (Text - Firm ) OR (Text - Firm) OR (Text - Firm) OR (Text - Name) OR (Text - Name) OR (Text - Name) OR (Text - Name) OR (Text - Firm) OR (Text - Name) OR (Text - Name) OR (Text - Name) OR (Text - Name) OR (Text - Name) OR (Text - Name) OR (Text - Name) OR (Text - Name) OR (Text - Name) OR (Text - Name) OR (Text - Name) OR (Text - Name)
  • In any text editor, create a list of keywords to use in your search. Separate each term with a carriage return to use the OR Boolean operator. If you list terms sequentially with spaces between them, the AND operator will be used instead.
  • In IPRO Search, create a new case, select the email archive to search and the custodian involved: Jack Rutter. Deselect the other locations.
  • Perform an advanced search. Click Search > Advanced Search.
  • In the Email section, set the operator to Any of and add rules for the following:
  • Sender: Matches, jack rutter, Exact Match (not selected)
  • Recipients: Matches, jack rutter, Exact Match (not selected)
  • Item Type: Matches, Message
  • Item Type: Matches, Appointment
  • Item Type: Matches, Task
  • Item Type: Matches, Note
  • Body: Contains (word list), Any of. Then click Upload to load the word list you created and view the terms. Your result will contain any of the terms in your list.
  • Start Date: Between, 04/06/2007 Inclusive and 04/06/2017 Inclusive.
  • Delivered Date: Between, 04/06/2007 Inclusive and 04/06/2017 Inclusive.
  • In the Attachment section, set the operator to Any of and add rules for the following:
  • Filename: Matches, * (asterisk in the text field), Exact Match (not selected)
  • Filename: Matches, Is empty
  • Click Search.
  • Select and preview each item. Tag the ones to investigate further, noting email subjects, terms, and individuals. Add comments to items for yourself and your team.
  • Export items for your suit.