Search syntax guidance
Your search condition can consist of a simple search for a value in any of the default fields or a directed search for a value in a specific field. In addition, you can add operators to join conditions for complex searches. By providing search conditions in any of the following areas, you can perform an action on that subset of documents, such as promote, export, folder, image, OCR, and more.
- In >, provide search conditions in , by typing the syntax in the field or in a text file.
- In >provide search conditions by typing in the Search box or using Search Builder.
- In provide search conditions by typing in the Search box or using Search Builder.
When providing search conditions, be aware of the following general rules. Additional sections in this topic describe specific aspects of search.
Category | General rule |
---|---|
Stop words | Unlike some products, Epiq Discovery indexes all words in documents, including stop words. Your search can include stop words. |
Case sensitivity |
Most elements in your search, including logical operators (and, or, and but) and date operators (to and on) are not case sensitive. However, the following search elements are case sensitive.
Values you supply are not case sensitive. Both of the following examples return the same result: Extracted_Text(Attorney Client) Extracted_Text(attorney client) |
Accent insensitivity | Search applies accent insensitivity to values you supply. When you supply a term with an unaccented character or an accented character (for example, é or ñ), search returns documents that contain the term using any form of the character (Elise and Élise). |
Search default fields
You can search for a value without supplying a field by simply typing the value in or . When you do so, Epiq Discovery compares the value to the default fields at hand. See the following links for more information about search using values without fields. For example, type a value, such as "Smith" to return documents that contain "Smith" in any of the default fields shown in the following links.
To search for a word in the default fields, just type it. If you supply multiple words, the system searches for the whole phrase.
privilege
John Smith
In >, the search syntax you provide in is applied against the fields selected in . By default, Epiq Discovery searches for the s in 15 preselected fields. You can change the field selections in as needed.
Default filter fields | ||
---|---|---|
Author |
Extracted Text |
Speaker Notes |
BCC | File Name | Subject |
CC | From | Title |
Comments | Hidden Content | To |
Email Header |
Last Author | Track Changes |
When you search for documents by typing a keyword in the Search box in Inspect and Review or when you run a Search Term Report, Epiq Discovery searches for the Keyword in the below fields by default.
Search default fields | |||
---|---|---|---|
Attachment Range | Cloud Drive Owner | End Bates | Parent File Name |
Author | Cloud Drive Sharing User | Extracted Text | Privilege Detection |
BCC | Cloud Drive Title | File Extension | Speaker Notes |
BCC (Email Addresses) | Cloud Drive URL | File Name | Subject |
BCC (Names) | Comments | File Path | Summary Format |
Begin Bates | Conversation Index | From | Summary Size |
CC | Document Number | From (Email Address) | Summary Text |
CC (Email Addresses) | Domain Categories | From (Name) | Title |
CC (Names) | Domain Recipient | Hidden Content | To |
Child Bates | Domain Sender | Importance | To (Email Addresses) |
Cloud Drive Date Shared | Domains | In Reply To | To (Names) |
Cloud Drive Description | Email Folder | Message ID | Track Changes |
Cloud Drive Folder | Email Header | OCR Text | Transcribed Text |
Cloud Drive Last Modified By | End Attach | Parent Bates | Translated Text |
To view all of the available fields, use Search Builder or view the Search field reference topic.
Search specific fields
A field search targets the search to look for the value only within the specified field. When you type a field name a Keyword or Search, capitalize each word and use an underscore between multiple words. The following list shows some of the available fields.
- System fields: Custodian, Source, Data_Name, Folder, Document_Type, Assignment, Filter_Job, Keyword_Hits, Promote Job, and Production.
- Other fields categorized by type: date fields (Date_Created), number fields (Attachment_Count), document fields (Author), and text fields (Extracted_Text).
To find " cloud" in the Subject field, type the following example.
Subject(cloud)
To search for a word, supply the word as the value between the parentheses. To search for a phrase, surround the phrase with a set of double quotation marks.
To find documents with | Syntax |
---|---|
The word "cloud" in the Subject field. | Subject(cloud) |
The phrase “John Smith” in the Author field. | Author(John Smith) |
A date in the Date field. Make sure to enter dates in the MM/DD/YYYY format, as shown. | Date(10/04/2019) |
You can also check supply conditional values, such as IS NULL for empty fields or IS NOT NULL for fields that aren't empty.
To find documents with | Syntax |
---|---|
No value in the From field. | From(IS NULL) |
Any value in the To field. | To(IS NOT NULL) |
Compare number values
Supply comparison operators when you want to compare two numeric values. These operators include operators for equal to, less than, greater than, equal to or less than, and equal to or greater than (=, <, >, <=, and >=).
To find documents with | Syntax |
---|---|
Less than 100 pages. | Page_Count(<100) |
More than two attachments. | Attachments(>2) |
Between ten and twenty pages, inclusive. Note that Page_Count only applies to image files. | Page_Count(>=10 AND <=20) |
A file size of 1,048,576 bytes or less. |
File_Size(<=1048576) |
Supply date ranges
When entering a date, always use MM/DD/YYYY format. Use the ON date operator when you intend to include a specified date. For instances when you want to find a date within known a range, use the date operator TO. To find all dates before or after a specified date, use the * wildcard.
To find documents with | Syntax |
---|---|
A specific date. | Date_Created(01/01/2019) |
The listed date and all prior dates. |
Date (* TO ON 03/01/2019) |
The listed date and all later dates. | Date(ON 03/01/2019 TO *) |
The listed dates and any date in between (dates within 2018). | Date_Created(ON 01/01/2018 TO ON 12/31/2018) |
Received dates between the first and last day of February, 2019. | Date_Received(02/01/2019 TO 02/28/2019) |
Received date is populated. | Date_Received(IS NOT NULL) |
Print date is empty. | Date_Printed(IS NULL) |
Use logical operators and grouping
When you want to search for multiple criteria, use a boolean operator to connect the criteria. Boolean searches find either inclusive or exclusive matches. Always type logical operators in uppercase. For example, to search for both “Miller” and “contract” in the default fields, supply the following condition.
Miller AND contract
The following list contains the available boolean operators.
- Use AND when you want both terms present.
- Use OR when you want either term present.
- Use NOT when you want to exclude a term.
For grouping, use a set of parentheses to evaluate a group of conditions separately, as shown below. This condition returns matches for Khan with either Adams or Smith.
(Adams OR Smith) AND Khan
If you omit the parentheses, the system evaluates ANDs before ORs, which changes the results of the following example to return either Adams or both Smith and Khan.
Adams OR Smith AND Khan
To find documents with | Syntax |
---|---|
The word "cloud" or "sun" in the Title field | Title(cloud OR sun) |
Both "cloud" and "sun" values in the Title field | Title(cloud AND sun) |
The value "cloud", but not "sun" in the Title field. | Title(cloud AND NOT sun) |
One of the supplied authors and the title with either "sunny" or "windy". | Author(“John Smith” OR “Jane Smith”) AND Title(sunny OR windy) |
The word "cloud" but not with either "sunny" or "windy" in metadata (because no field was supplied). | cloud AND (NOT sunny OR NOT windy) |
The value "cloud" and/or "sun", and both "moon" and "stars" in the Title field. | Title(cloud OR sun) AND Title(moon AND stars) |
Wildcards as placeholders
In search criteria, use wildcards as placeholders to represent one or more characters within a single word. A question mark, ?, acts as a placeholder for a single character. An asterisk, *, acts as a placeholder for multiple characters. However, understand that wildcard searches can use a large amount of system resources, which can slow or stall productivity.
Wildcards prove helpful when searching for a word that might be misspelled. For example, the word “privilege” often appears misspelled, but the following example finds most spelling variations of privilege. You can supply wildcards within or outside of quotation marks, as shown below.
priv*ge
"priv*ge"
For optimum performance when using wildcards, place them in the middle or end of a word to return specific results. For example, supply "a*orney" to return attorney with one or more t's to find misspellings. However, avoid supplying wildcards at the beginning of a word or elsewhere where the results would be too open ended to return meaningful results (for example, do not use c* or *ing).
To find documents with | Syntax |
---|---|
Extracted text that contains a value where one character can differ (team or term). Use the question mark ? wildcard. | Extracted_Text(te?m) |
A value that can vary by any number of characters. Use the asterisk * wildcard to find publicly or publication. | Extracted_Text("public*") |
A commonly misspelled word, like receive. | Extracted_Text(rec*ve) |
A value using two different wildcards. Do not supply multiple wildcards within a value. A workaround for this is to repeat the field for each wildcard. | Extracted_Text(te?m) OR Extracted_Text(ter*) |
Fuzzy searches
Use a fuzzy search to return approximate matches (within one or two characters) of a supplied term. When using this type of search, the algorithm finds relevant terms by inserting, deleting, or substituting characters. You designate the fuzzy search by providing a term followed by a tilde (~) and a number 1 or 2. Fuzzy searches return the top 50 terms found.
To find documents with |
Syntax |
---|---|
Relative terms, such as an insertion (adjourns), a deletion (a typo like adjurn), and a substitution (a typo like adjuorn). | adjourn~1 |
Relative terms that exist in the documents, such as account, accounts, accounted, accent, and so on. | account~2 |
Proximity searches
Use a proximity search to search for a match between two terms that occur near, next to, or in the vicinity of a specified number of words. In the following example, bank W/3 debit returns a hit when the word "debit" appears within three words or less of “bank”. The following text is a match, counting the words as shown. This would also match with fewer words in proximity, such as "bank debit" or "bank transaction debit".
The same example would not hit on "bank transaction credit or debit" because that proximity is four words.
To find documents within | Syntax |
---|---|
Words. Variations of a name while ignoring the use of one or two initials or middle names. This search returns documents containing any of the following text combinations. Ginger Jones Jones Ginger Ginger L. Jones Ginger Louise Fletcher Jones Jones Ginger Louise Fletcher Note that the results return documents that include the reversal of two values on either side of W/, shown as "Jones Ginger" and "Jones Ginger Louise Fletcher". |
Ginger W/3 Jones |
Phrases. When you enter a phrase before or after the W/ within connector, understand that the phrase must exist. This example returns several results, including: client attorney discussion client attorney <word> discussion client attorney <word> <word> discussion discussion client attorney discussion <word> client attorney discussion <word> <word> client attorney |
client attorney W/3 discussion |
Special characters. Special characters are treated like a space. The following example counts xyzcompany, com, from, GlobalHR, and EMEA as words, skipping the at sign, period, and slash.
|
rgomez w/5 EMEA |
Chaining. When you supply multiple proximity phrases to find multiple words that exist in a phrase. This example returns documents that contain the word "phone" within 5 words of "conference", when conference is also within 3 words of "details (phone <words between = 0 to 4> conference <words between = 0 to 2> details). |
phone W/5 conference W/3 details |
Logical phrase. Supply one logical phrase before or after the W/ within connector. This example finds documents with both Esme and Thomas within four words of property, as shown in the following phrases. Esme Thomas and the property Esme Lynn Thomas property Thomas property and Esme property Property of Esme Thomas Thomas and Esme owned property |
(Esme AND Thomas) W/4 property |
Phrase with a contraction. Because search splits words with special characters, contractions count as two words divided at the apostrophe. This example finds documents with the word rent within four words of month, shown below. rent is due each month rent is paid each month However, this example would not find documents matching: > rent isn't due until month because "isn't" is counted as two words, making rent within 5 of month. |
rent w/4 month |
Words ending with a wildcard. You can use wildcards to replace any number of characters at the end of a word. In addition, when using multiple words, surround the words with quotation marks. This example finds documents that contain the following phrases. Jessie Lynn Miller tracked her stock purchases Jessica Marie Lynn Miller made a stock purchase |
Jes* W/2 "Lynn Miller" W/5 "stock purchase*" |
Nested proximity with parenthesis groupings. You can use parentheses for grouping to find proximity. Example 1 finds "dosage" within three words of any word that begins with "standard" or "guideline" and returns documents that contain "formula" within 10 words of that result. |
Example 1: formula W/10 (dosage W/3 (standard* OR guideline*)) Example 2: ((Field* OR ASDF) AND (ASDF OR Valu*)) W/30 (ASDF OR (Compatib* W/9 Lists) OR ASDF OR (Burndown W/11 ASDF)) |
Field search. You can use a term that contains proximities, wildcards, or a combination, separated by a logical operator within field criteria. This example finds the following value within the Extracted Text field: "dosage" within three words of any word that begins with "standard" or "guideline" and returns documents that contain "formula" within 10 words of that result. | Extracted_Text(formula W/10 (dosage W/3 (standard* OR guideline*)) |
Searches with alphanumeric or special characters
When your search includes words with special characters (such as, - @ $ % . ~ | & \ /), apostrophes, or mixed alphabetic and numeric characters, the following rules apply.
- Words with mixed letters, case, and numbers are treated as a single word (token) in search. To find SD500x, you can search for SD500* or SD500x, but not SD500 because that isn't the complete word.
- Special characters (such as, - @ $ % . ~ | & \ / ) convert to spaces. For example, an email address such as frankie.mason@mycompany.com, is considered four separate words (frankie mason mycompany com).
- Search treats apostrophes (') as a space anywhere they appear, including in possessive words (Sarah's) and contractions (can't). For example, to find "rent isn't due", you can simply type the phrase. But to find similar phrases, such as "rent isn't due" and "rents aren't due", make sure you allow two words for the contraction. In this case, use rent* W/3 due.
-
Curly double quotation marks (“ ”) automatically convert to straight double quotation marks (" ").
To find documents with |
Syntax |
---|---|
A file path of \company\data. | company W/1 data |
An account number of AR-123FP. | AR AND (123FP) |
//users/jsmith | users jsmith |
ABC Company, Inc. | ABC Company Inc |
tsmizth@company.com |
tsmiz*@company.com |
Reserved words and phrases
Epiq Discovery reserves the use of certain reserved words or phrases, such as TO, ON, AND, OR, NOT, IS NOT NULL, IS NULL. To use any of these reserved words or phrases as literal text, surround the word or phrase with quotes.