Not sure now if the NOT operator will work. Accoding to the document;
The Boolean NOT limits your search by returning only results containing the first word but not if the second word is also contained. When using the NOT operator, Discovery Accelerator is instructed to exclude the result if the word or phrase following is found in the same result returned by any other word or phrase on that line in the search field.
However, we have been given a list of phrases that need to be excluded from all email captured for a particular set of users.
For example, turn over all email sent to\from Joe over the last three years but do not include any emails that mention;
Attorney-Client Communication or Project 10
The NOT operaor only seems to apply if we were looking to exclude the phrase "Project 10" if it is mentioned in conjunction with another word or phrase.
Is that a correct assumption?
i ran a test in my lab and it appears to work the way you want it to. i did a search to/from a certain custodian and reviewed the results. i then ran the same search and used the NOT operator to exclude a phrase from the content. the new results didnt show the emails with the excluded phrase, as expected.