Difference in search results between eDP and EV.Cloud

book

Article ID: 100044996

calendar_today

Updated On:

Description

Error Message

N/A

Cause

These differences in searches between eDiscovery and Enterprise Vault.Cloud are by design and cannot be changed by any setting or configuration.

Resolution

Searches for multiple addresses will need to be ran individually.

Example: If a search needs to be ran to find all emails TO user1@email.com and all emails TO user2@email.com, then two individual searches will need to be ran in eDiscovery. If one search is ran for both of these email addresses, only emails with both addresses in the TO field will be found.

Issue/Introduction

When running a collection in Veritas eDiscovery for Enterprise Vault.Cloud, there are fields that can be used to specify an email address to search for in a specific field (TO, FROM, CC, BCC). New lines can be added to search multiple fields use the "+" symbol. However, when the collection sends the search query to Enterprise Vault.Cloud, it uses ANDs instead of ORs, so all lines have to be met in order to find an email. Searches within Enterprise Vault.Cloud use ORs instead of ANDs so any of the lines can yield a search result. This difference in functionality causes similar/same searches to return different results when ran in both products.