We use cookies on our website to ensure we provide you with the best experience on our website. By using our website, you agree to the use of cookies for analytics and personalized content.This website uses cookies. More Information
It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda Message Archiver

Advanced Search Options - Auditor

  • Last updated on

This article refers to the Barracuda Message Archiver firmware version 5.0 or higher.

See also: ANDs and ORs and Keyword Expressions videos

Punctuation

Punctuation is treated as white space in search strings with the following exceptions:

  • Email addresses and Internet hostnames – Treated as single searchable tokens. 
    Example: user1@mycompany.com is treated as a single searchable token.
  • Period (.) – When not followed by whitespace, a period is treated as part of a word.
    Example: 1.2 is treated as a single searchable token.
  • Hyphen (-) – When a token containing a hyphen also contains a number, the complete item is treated as a part of the number. 
    Examples:
    MD-1800 is considered a searchable word, including the hyphen.
    hyphen-madness is treated as two words ("hyphen" "madness") with the hyphen treated as whitespace.

Available Actions

Many different actions are possible from the Advanced Search interface that help you to build and save queries with multiple search parameters:

  • Add search parameters – Click on the plus sign (+) located to the extreme left of a search criteria line; a new search parameter line is added.
  • Remove a search parameter – Click on the minus sign (-) located to the left of the search parameter you wish to remove.
  • AND or OR search parameters – Click AND at the end of a search parameter to signifies that it is to be logically ANDed to the next specified parameter. If your next criteria is to be logically ORed, click AND to toggle it to OR.
  • Save a constructed query – In the SAVE AS field, enter the name under which the query is to be saved, and click SAVE AS. If you enter a name that already exists, the new search parameters overwrite the previously saved parameters under that name.
  • Run a previously-saved search – Select the Saved Search from the pulldown menu to load the search parameters onto the page, then click Search.

Build Search Queries

When including both AND and OR search terms in a query, the order in which these terms are placed is important. For example,

  1. Add the first term "A", and then add term "and B"; the query searches as: (A AND B)
  2. Add a term "or C"; the query searches as: ((A AND B) OR C)
  3. Add a term "and D"; the query searches as: (((A AND B) OR C) AND D)

This affects preparation and ordering of Advanced Search queries as follows:

Typically, you first build a population of results by using "OR", and then subtract items from that population by using "AND". For example,

TermA OR
TermB OR
TermC AND
TermD

If you wish to force a different order of operations by placing parentheses yourself, use the Keyword Expressions search mode and construct your query according to those guidelines.

Advanced Search Parameters 

Select the area of a message to which the search criteria applies.

Note that the browser time zone is used unless the time zone is specified in a search query. For example, set the search criteria to All - Date - is equal to - 2013-01-21 15:41:50 -0500 where -500 is the time zone.

From the BASIC > Search page, click on Help for additional search criteria details.

The following tables describe the available advanced search parameters.

Table 1. Search Parameter = All.
Entire MessageLook in all fields and all data contained in each item for the entered text.
Entire Message (Phrase) Look in all fields and all data contained in each item for the EXACT phrase as entered.
From/OwnerLook only in the From and Owner fields of each item, as applicable, for the entered text.
To/CcLook only in the To and Cc fields of each message for the entered text.
Subject Look only in the Subject lines of each item for the entered text. For Distribution Lists, the name of the list is searched. For Contacts, the Full Name (both First and Last) is searched.
DateSearches for all items with a timestamp that matches the specified date range. For Appointments, the Date is the scheduled start date and time of the Appointment, except when searching Date "is equal to". In that case, the search matches Appointments that span the provided Date. For Tasks, the Date is the date and time that the Task was created.
hh:mm:ssAdd after the date if you wish to specify a specific time on that date; the browser time zone is used unless the time zone is specified in the query, for example, 15:41:50 -0500.
Archive TimeSearches for all items added to the Barracuda Message Archiver in the specified date range.
BodyLook only in the body of each message for the entered text.
Subject/BodyLook only in the Subject line and the body of each message for the entered text.
Attachment NameLook only in the names of message attachments for the EXACT phrase as entered
DiscoverySearches for all items that were sent or received by any email alias, address, or account that is associated with the specified email addresses, as resolved against the LDAP servers identified on the USERS > Directory Services page in the Barracuda Message Archiver web interface. Email addresses must be completely formed (username@example.com).
Table 2. Search Parameter = Email.
Entire MessageLook in all fields and all data contained in each item for the entered text.
Entire Message (Phrase)Look in all fields and all data contained in each message for the EXACT phrase as entered.
Keyword ExpressionsSearches based on a custom query using keyword expressions. Each expression must be in the form search_field:phrase
Subject/BodyLook only in the Subject line and the body of each message for the entered text.
From/To/Cc

Look only in the FromTo, and Cc fields of each message for the entered text.

From

Look only in the From field of each message for the entered text.

To/CcLook only in the To and Cc fields of each message for the entered text.
Bcc Look only in the Bcc field of each message for the entered text.
DomainLook in the From, To, and Cc fields for an email address whose domain matches the entered text.
SubjectLook only in the Subject line of each message for the entered text.
Has File AttachmentReturns all messages that have at least one attachment.
Has Linked AttachmentReturns all messages that have at least one SharePoint link.
Has AttachmentReturns all messages that have at least one file attachment or linked attachment
Attachment NameLook only in the names of message attachments for the EXACT phrase as entered.
Contains ImagesReturns all messages that contain images embedded in the body.
Image TypeLook for messages with embedded images that are of the specified type. No dot (.) before the extension is needed. For example, enter gif to return all messages that contain images in the .gif format.
Inbound Returns all messages received from an external source by any user in any domain listed in the Local Domains section of the BASIC > IP Configuration page in the web interface.
OutboundReturns all messages sent to an external mail server by any user of any domain listed in the Local Domains section of the BASIC > IP Configuration page.
Internal Returns all messages sent between any users of any domain listed in the Local Domains section of the BASIC > IP Configuration page.
Date Searches for all messages with a timestamp meeting the specified date range. Dates must be entered in the YYYY-MM-DD format.
BodyLook only in the body of the message for the entered text.
Instant MessageLook only in the text of Instant Messages for the EXACT phrase as written.
Table 3. Search Parameter = Note.
Entire MessageLook in all fields and all data contained in each item for the entered text.
Entire Message (Phrase)Look in all fields and all data contained in each item for the EXACT phrase as entered.
Owner Look only in the Owner field of the item for the entered text.
Subject Look only in the Subject line of each item for the entered text.
Date Searches for all items with a timestamp that matches the specified date range. For Appointments, the Date is the scheduled start date and time of the Appointment. For Tasks, the Date is the date and time that the Task was created.
BodyLook only in the body of each item for the entered text.
Attachment NameLook only in the names of attachments for the EXACT phrase as entered.
Table 4. Search Parameter = Appointment.
Entire MessageLook in all fields and all data contained in each item for the entered text.
Entire Message (Phrase)Look in all fields and all data contained in each item for the EXACT phrase as entered.
From Look only in the From field of each item for the entered text. For Appointments, the From field is usually equivalent to the Organizer of the Appointment, and is the sender or creator of the Appointment.
SubjectLook only in the Subject line of each item for the entered text.
Date Searches for all Appointments scheduled for the specified time period. Combine two (or more) Date searches to get a list of Appointments scheduled to occur between a specific start and end date.
Location Look only in the Location field of each item for the entered text.
Attendees Look only in the Attendees field of each item for the entered text. For Appointments, the Attendees field is usually the equivalent of the ToCc and Bcc fields, and contain the recipients of the Appointment or Meeting Request.
Attachment NameLook only in the names of Appointment attachments for the EXACT phrase as entered.
Table 5. Search Parameter = Distribution List.
Entire MessageLook in all fields and all data contained in each item for the entered text. This is the default search scope, and is equivalent to the Basic Search mode.
Entire Message (Phrase)Look in all fields and all data contained in each item for the EXACT phrase as entered.
OwnerLook only in the Owner field of the item for the entered text.
Subject Look only at the names of each Distribution List for the entered text.
Date Searches for all Distribution Lists that were last modified during the specified time period. Dates must be entered in the YYYY-MM-DD format.
Members Look only in the Members field of each item for the entered text. Matches are based on the individual members' email address as well as their First and Last Names.
Table 6. Search Parameter = Task.
Entire MessageLook in all fields and all data contained in each item for the entered text. This is the default search scope, and is equivalent to the Basic Search mode.
Entire Message (Phrase)Look in all fields and all data contained in each item for the EXACT phrase as entered.
Delegator (From)Look only in the From field of each item for the entered text. For Tasks, the From field is usually equivalent to the originator of the Task, and is the sender or creator of the Task.
Subject Look only in the Subject line of each item for the entered text.
Date Searches for all Tasks scheduled to end at specified time period. Dates must be entered in the YYYY-MM-DD format.
Assignee (To)Look only through the owners, of the Task for the entered text. For Tasks, the Owners are usually the equivalent of the To field of a Task Request, and are the ones who are responsible for, or have ownership of, the Task. Matches are based on the attendees' email address as well as their First and Last Names.
Attachment NameLook only in the names of Task attachments for the EXACT phrase as entered.
Due DateSearches for all Task due dates, modified dates, and completion dates based on the specified time period.
BodyLook only in the body of each Task for the entered text.
Subject/BodyLook only in the Subject line and the body of each Task for the entered text.
Table 7. Search Parameter = Contact.
Entire MessageLook in all fields and all data contained in each item for the entered text. This is the default search scope, and is equivalent to the Basic Search mode.
Entire Message (Phrase)Look in all fields and all data contained in each item for the EXACT phrase as entered.
Owner Look only in the Owner field of the item for the entered text.
Name (Subject)Look only in the Subject of the Contact item for the entered text. This is usually equivalent to the First and Last Names of the Contact.
Date Searches for all items with a timestamp that matches the specified date range.
Address Look only in the Address field of each Contact for the entered text.
CompanyLook only in the Company field of each Contact for the entered text.
Email AddressLook only in the Email Address field of each Contact for the entered text.
Table 8. Search Parameter = Social Media.
Entire MessageLook in all fields and all data contained in each item for the entered text. This is the default search scope, and is equivalent to the Basic Search mode.
Entire Message (Phrase)Look in all fields and all data contained in each item for the EXACT phrase as entered.
SiteSelect a social media site from the drop-down list to search for all messages from the selected site.
UserLook only for the user who submitted the social media message.
DateSearches for all items with a timestamp that matches the specified date range.

Last updated on