How can I search and export in Discovery Accelerator
I tried following some documentation but I must be missing something basic. I am trying to search specific archives in my vault using discovery accelerator and export the findings to PST files but cannot for the life of me figure out how to do it. Any help is greatly appeciated. I am using Enterprise Vault 8.0.2 for Exchange. I have DA installed and have run searches but cannot figure out how to export the data.Solved3KViews1like12Comments
e-Discovery (Clearwell, Discovery Collector and Discovery Accelerator)
Does anyone know if Symantec will only be supporting a single e-Discovery product in the future? As of now; it seems like on of these products provide more features than others. However; each of them has something specific that the others don't have which makes it difficult to use without assuring it is integrated with Enterprise Vault Archived data. Example: Discovery Collector: Can expand ZIP files and PST files to allow them to be searchable? “Clearwell” cannot search within ZIP files and PST files, but it provides various functionality when searching or producing items that “Discovery Collector” or “Discovery Accelerator” does not provide. “Discovery Accelerator” cannot search within ZIP files and PST files and formats for producing items is less than what “Clearwell” provides. However, If the e-discovery Life Cycle includes “Enterprise Vault” data; then “Discovery Accelerator” will be able to search within PST and ZIP files whether data was archived using Enterprise Vault functionality, or copied using Discovery Collector data into an Enterprise Vault archive. If the e-discovery Life Cycle includes “Enterprise Vault” data; then “Clearwell” Legal Hold functionality (Once the NEXT release is available) will truly apply “Legal Hold” functionality as it can be applied without notifying the “end user” that a litigation is undergoing. I find it to be a “Security Risk” if a user is under investigation, and we are notifying them to not DELETE data during the “Identification” and “Preservation” steps using “Clearwell” without “Enterprise Vault”. Do you agree? This may be a misunderstanding on how it works at my end. Also, Does anyoneknow an estimated date on when the next “Clearwell” release will be available to allow “Legal Hold” on Enterprise Vault archived data? Thanks, DennisSolved1.8KViews0likes10Comments
CA Database Schema - SQL Querying
Hi there - I am currently looking to build some custom SQLqueriesagainst the CA database but am struggling to understand the various tables and their relationships. Is anyone aware of where I can find a data relationship diagram, CA data model schema, or data dictionary to assist? As a temporary option, I am looking at the IntDiscoveredItems table which I understand are similar to the alerts produced when certain hotwords are hit. However I am unsure how to link this table back to the IntHotwordID table? Any help is much appreciated.1.6KViews0likes2Comments
Compliance Accelerator with Mailbox Archiving
I am trying to use Compliance Accelerator to search user's mailbox archives. I created a new department and marked the Mailbox Archive as searchable. I gave the ev account all the nessecary roles on the department. However when I create a search it doesn't run. I have another department for the journalled mail and I'm able to search that without any issues. Is there some other permission somewhere that prevents me from search mailbox archives?Solved1.6KViews0likes2Comments
Proximity Operator
Hello, Our legal team has requested we perform discovery using a proximity operator. Specifically two words that appear within 3 words of each other. I have read I could use NEAR, but that limits the proximity to 50 words which is not suitable at this time. Are their any new features in newer versions of Evault \ Discovery Accelerator that would allow for a more defined proximity search? Thanks for your time.Solved1.5KViews2likes7CommentsCA - Random Caputre Question
I was wondering if there was a way to change the way CA caputres emails. Here is our problem. Ex. I send an email to a distrubition list which has 20+ employees in our department and a couple outside clients are on the email as well. This email is now marked as external outbound. My manager reviews all the 20 internal employees on the email and now has the same 20 emails to review. I'm having a hard time to understand why this email will go to their ques since they - did not send the email - email did not come from outside in The email should only be review by my reviewer since I was the author.Right ? Our current config - The 20 employees are mapped as an exception to the same reviewer. (The department has more then 20+ emoployees with differnt reviewers) - ver. CA 9.02 - Random capure, StatisticalSolved1.3KViews1like8Comments
EV Compliance Accelerator questions
Hi All, Hoping someone here can shed some insight on a couple items our compliance department want cleared up. a. Delete the large test pool of open items on our enterprise vault? b. Can we flag or whitelist addresses? c. Can less than one percent be sampled? d. How can I view the reports/activity as a user? On point a. we deployed CA earlier this year anticipating an SEC filing shortly there after, it was delayed and is now going to take place finally. The CCO would like to not have to bulk mark 50K+ items that have accumulated since they weren't operating in a production capacity with the product and wants to know if there is a way to clear all of this out. They would like to see if we can flush the random sampling hits and test searches to start from scratch while leaving the sampling configuration in place against the departments that have ben previously configured. Point b. I think I have the answer and that should be the ability to set a dash infront of an entry in the hotword / keyword parameters for the sampling IE: -donotreply@delta.com to skip anything with that address in the journaled mail content correct? Point c. they have the sampling rate set to 1% right now and feel that is still too much of a percentage as they will be monitoring 200 users for compliance with CA. Idealy they would like to be able to set it around .25-50% for now. Point d. is related to configuring CA reports that would be like a report template that any CA user would be able to see and run at any time. What we've come across is that a report created by the CCO can't be seen by another user that would be a compliance reviewer. Any assistance would be appreciated! =) Thanks, Nick M.Solved1.2KViews0likes3CommentsCA Unable to modify a search thats setup
We are running CA 10.0.4 and have searches setup on a daily schedule to collect the emails against the hotword for the compliance team to review. They have started providing email addresses to block, so i can see we need to do this under the freeform email addresses area. I created a new search to test this, which is fine and works - but I am unable to go back into the search and modify the email exclusions to include any new ones that they add.. I have created a new role that has all the permissions selected and it still doesnt allow me to modify the search. Is this a restriction of the product or is there a way to do this and to also remove old searches under the search screen in Departments? Any assistance gratefully recieved!Solved1.1KViews0likes3Comments
Deduplication in Discovery Accelerator
Hi- I am running Discovery Accelerator 9.0. I am searching for 4 email addresses in the To/From fields. The search is limited to a journal archive. My question is, when the search results are presented, are they deduplicated automatically? The search results returned 109,000 items. Does Discovery Accelerator, behind the scenes, perform deduplcation during the search process? I've read a ton of material, but its not clear to me whether deduplication is something that I have to elect to do, or if it is done by default.Solved1.1KViews0likes2Comments