Enterprise Vault advanced search Returns values outside of date range
Hello,
When searching with advanced search on an EV 11.0.1 HF5 server, very recent results were returned even though the date range I entered was 4.5 years ago. I noticed when I unselected "search attachments" the results all fell within the expected date range. Is this by design? Does this mean that the old date range appeared in some text in the attachment? I found this article https://www.veritas.com/support/en_US/article.000015394
and performed added the search with the “other results attributes” and all 3 values were the expected dates. Thank you!
You're on the right track, but it's not that the dates appear in the text of the attachment. It's that the attachment has its own set of date properties (modified date "mdat" and creation date "date"), separate from those of the item to which it's attached. It is those dates that are tripping your search. In this case, it sounds like someone very recently sent an e-mail and attached a file that was modified 4.5 years ago.
Recall that for most index properties, you can search that property in attachments by prefixing the property name with "a_". Therefore, if you expand your Other Result Attributes field to include "a_mdat" and "a_date", in addition to the properties listed in the article, then you should see the attachment's modified date and creation date, respectively. I bet at least one of those matches your specified date range.
--Chris
