Discovery Accelerator search headache...

[Bobc]

We're trying to run a search for email between two staff members. The search options for a "From > To" are returning emails where the person is also cc'd or bcc'd and we do not want those, we just want the ones were the staff members name is the only name on the "To:" line. Does anyone know how to do this or know what we're missing here ? (this is DA 8.0).

[Liam_Finn1]

 Even if the person is BCC the message is still to them so the BCC will appear in the search

[Bobc]

True but they are separate fields, so you should be able to say where TO: is "this persons name string" only. ( I would think so anyway).

[TonySterling · Accepted solution]

Have a read of this technote:

http://seer.entsupport.symantec.com/docs/328247.htm

It looks like you might be able to exclude CC and BCC using these operators in analytics.

[Liam_Finn1]

 Check out this

https://www-secure.symantec.com/connect/articles/discovery-accelerator-hidden-searchable-items

Maybe you can use the advanced fields to exclude BCC but i have only ever used them to find items not exclude