Exclude Items From Search

hey Andrew. what are you using? EV 11 Search, DA, Clearwell, old Search page?

Have you tried the "NOT" operator?

Refer to Pg# 26 & 27 of the below white paper.

https://support.symantec.com/en_US/article.TECH88031.html

Using DA 10.4

It looks like I can use the NOT operator? If that's the case, is it as simple using -"exclude this phrase" ?

Beat me to it Amol....

Trying that now

correct

Not sure now if the NOT operator will work. Accoding to the document;

The Boolean NOT limits your search by returning only results containing the first word but not if the second word is also contained. When using the NOT operator, Discovery Accelerator is instructed to exclude the result if the word or phrase following is found in the same result returned by any other word or phrase on that line in the search field. 

However, we have been given a list of phrases that need to be excluded from all email captured for a particular set of users.

For example, turn over all email sent to\from Joe over the last three years but do not include any emails that mention;

Attorney-Client Communication or Project 10

The NOT operaor only seems to apply if we were looking to exclude the phrase "Project 10" if it is mentioned in conjunction with another word or phrase.

Is that a correct assumption?

i ran a test in my lab and it appears to work the way you want it to. i did a search to/from a certain custodian and reviewed the results. i then ran the same search and used the NOT operator to exclude a phrase from the content. the new results didnt show the emails with the excluded phrase, as expected.

Thanks Andrew - I'll give that a try

This is how I am doing the search. However, when I try a search with or without the phrases I get the same amount of hits. Am I missing something?

i dont know why you would get a different outcome then i did. maybe test with one excluded phrase to start?