Skip to main content

 

Druva Documentation

How to search backed up emails

inSync Cloud Editions: File:/tick.png Elite Plus File:/tick.png Elite File:/cross.png Enterprise File:/cross.png Business

Note: Enterprise Search is currently under controlled availability. If your organization wants to use Enterprise Search, kindly contact Druva Support.

Overview

Using the Enterprise Search capability, inSync administrators can quickly find end-user emails that are backed up by inSync. You can search only those emails that are backed up for the following email clients:

  • Gmail
  • Exchange Online
  • MAPI

Note

  • You cannot search emails saved in *.PST. folder. However, you can search PST files using file search
  • You cannot restore MAPI emails; you can only search and download MAPI emails.

Following is a list of metadata attributes that inSync indexes for emails:

  • Email subject
  • Attachment name for each email

Search Emails

Procedure

  1. On the inSync Management Console menu bar, click Governance > Enterprise Search.
  2. Select Emails and enter a part or the entire email subject or a part or the entire attachment name in the search box. Use the filters and search operators available for email search to narrow down your search results.

    If you have not selected the Match exact words filter, then all words in the search query should at least contain 3 characters. For example, "qu" or "quarterly re" are invalid search queries where as "qua" or "quarterly rep" are valid search queries.

    The filters available for email search are described in the table below. 
Filter Name Description
From

Search emails from a particular sender.

In this field, you cannot enter names containing spaces. To add names containing spaces, copy the name containing spaces and paste it in this field. 

To/CC/BCC

Search emails that were sent to a specific recipient. 

In this field, you cannot enter names containing spaces. To add names containing spaces, copy the name containing spaces and paste it in this field. 

Email Sent/Received Between Search emails that were sent or received between a specific date range.  
Profiles Search emails created by users associated to a particular profile. Start typing the profile name to view the list of profiles that match your search string.
Users Search emails sent by a particular user. By default, inSync searches emails from all users but if you want to search emails from a specific user, enter the name of the user in this field.
Match exact words Select this check box if you want inSync to match the exact words of your query. For example, if your search query contains 2 characters, select this check box. 
Email(s) with attachment(s) only  Select this check box if you want to search emails that contain only attachments. 
Attachment Type Search emails that contain the attachment type specified in this filter. 
  1. Click the Search icon.

Download Emails

You can download all the emails that are displayed in the search results in EML format for further analysis and review.

Procedure

  1. Search for the emails that you want to download.
  2. Select the files that you want to download and click Download Email.

If you select multiple emails, all the selected emails are downloaded in a compressed file format. Following is the file naming convention of the downloaded emails:

SearchResults-<Date stamp>, <Time stamp>.<file extension of the compressed file format>

Email Search Results

The search results show a maximum of 1000 results that match your search query. inSync displays the search results progressively; loading the search results while scrolling. Using the Email Result option, upto 20,000 search results in CSV format can be sent to the email address of the inSync administrator who is logged in.

Procedure

  1. Search for emails.
  2. Click Email Result. The search results are emailed to you in CSV format.

The fields in the CSV file are explained in the following table.

Filter Name Description
Time when searched Displays the date and time stamp when the search query was run.
Query Displays the search query that was entered.
Exact Match, Dates, Types, Attachments, From, Participants, Users, Device Platforms Each filter is represented in a separate line and it displays the value that you used for each filter. If you have not applied a particular filter then, it displays Not Applied beside that filter name. If you have applied a filter, then the value of the filter is displayed beside the filter name.
Matches Displays a numeric value of the number of search results that matched your search query. 
Subject Displays the subject of the email.
Attachments Displays all the attachments of the emails along with attachment name and file size. 
Send/Received Time Displays the date and time stamp when the email was sent or received.
From Displays the email ID of the email sender.
To Displays the email ID of the email receiver.
Cc Displays the email ID of the person who was CCed in the email.
Bcc Displays the email ID of the person who was BCCed in the email.
User ID Displays the unique ID of the user.
User Name Displays the name of the user associated with the User ID.
Device ID Displays the unique ID of the device.
Device Name Displays the name of the device where the file is stored.