💡 Did you know?
You can connect search fields together using Boolean operators. 🔗
For example, a search for emails from Corona Urn that have been tagged as either Responsive or Non-Responsive can be searched:
email_fields.smtp_from:"corona.urn@liab.ly" AND tags:(Responsive OR Non-Responsive)
Search Builder Field Name | Search Field | Example | Notes |
AUTO TAGS | processing_flag | processing_flag:"Last Email" AND processing_flag:"Has Threads" | Looks up the picklist values of Auto Tags (QC Tags) applied by Logikcull during document processing. |
CUSTODIAN | custodian_id | custodian_id:35605 | Custodian can be looked up in the Advanced Search Builder, and once you’ve run this search it is then converted to an integer value in the search bar. |
DEDUPLICATION CHECKSUM | deduplication_checksum | deduplication_checksum:60b07eec186c8565f16e4dc93a9aba7c | Useful for pulling original + duplicates into search. Can be used for both non-email and email native records. String = hash value. |
DOCUMENT DATE | document_date | document_date:>=2010-01-01 AND document_date:<=2020-01-02 | Can look up a specific date, or a date range using a combination of Boolean and logical operators ” >=”, “<=”, “=” |
DOCUMENT TYPE | document_type | document_type:Email document_type:Spreadsheet | Uses picklist values contained in the Advanced Search and Filter Carousel to search document types. |
DOWNLOAD DOC ID | exports.download_doc_id | exports.download_doc_id:"Prod001-080" | Searches page-level documents downloaded within Logikcull, using the download document ID assigned during the download process. |
DOWNLOAD NAME | exports.download_id | exports.download_id:5e568905f30a38613267353a | Download name can be looked up in the Advanced Search Builder. Converts to a string value in the search bar. |
DOWNLOADED | exported | exported:true
exported:false | Filters search results based on whether documents were downloaded in Logikcull using a Boolean value True or False. |
DUPLICATE | file_duplicate | file_duplicate:false
file_duplicate:true | Returns either the first instance of duplicate documents or, with dedupe turned off, the duplicates of the first instance of a document. file_duplicate:false will only return a single instance of any given file for a project. |
EMAIL CONVERSATION ID | email_fields.conversation_id | conversation_id:01c9d20665514476acb100604bf29d1897964399f69e | In the document viewer, Metadata field = “Outlook Conversation ID” (See Email Thread ID). |
EMAIL RECIPIENTS | email_recipients | email_recipients:*@logik.com email_recipients:"Judy Dyer" | Searches all email recipient fields: ["to", "smtp_to", "bcc", "smtp_bcc", "cc", "smtp_cc"]. |
EMAIL SENDER | email_sender | email_sender:*@logik.com
email_sender:”Judy Dyer” | Searches all email sender fields: ["from", "smtp_from"]. |
EMAIL SENDER OR RECIPIENTS | email_participants | email_participants:*@logik.com email_participants:”Judy Dyer” | Searches all email recipient and sender fields at the same time:
["from", "smtp_from", "to", "smtp_to", "bcc", "smtp_bcc", "cc", "smtp_cc"]. |
EMAIL THREAD ID | thread_id | thread_id:01c9d20665514476acb100604bf29d1897964399f69e | In the document viewer, Metadata field = “Outlook Conversation ID” (see Email Conversation ID). |
FAMILY CHECKSUM | family_checksum | family_checksum:bf75df4f252be23aaa7f164edfd18970 | Uses the hash value assigned during document processing. |
FAMILY COUNT | family_count | family_count:3 | Returns documents where total family count (inclusive of parent and child(ren) equals the integer provided. |
FAMILY DATE | family_date | family_date:>=2010-01-01 AND family_date:<=2020-01-02 | All documents in a family inherit the document date of the parent as family_date.
Can look up a specific date, or a date range using a combination of Boolean and logical operators ” >=”, “<=”, “=”. |
FAMILY ID | family_id | family_id:4bb24950405739ec8990f832 | All documents in a family inherit the document ID of the parent as family_ID. |
FAMILY STATUS | family_status | family_status:"Is Parent” family_status:”Is Child” family_status:”Is Standalone” | Returns documents based on family status. |
FIELD CHECKSUM | field_checksum | field_checksum:61a1583c5d3b4854b4a1c0e4672347d2 | Searches the Hash value. |
FILE EXTENSION | file_extension | file_extension:msg | Searches the file extension contained in the file_name field; e.g., “Please Read this email.msg”. |
FILE NAME | file_name | file_name:“Please Read this email.msg” | Searches the document file name field. |
FILE PATH | file_path | file_path:"\Collection.zip\2018\001_Mail_PST\”
file_path:"001_Mail_PST\" | Partial file paths can be searched by wrapping in quotes. |
FILE SIZE | file_size | file_size:>=2400000 file_size:>=240000 AND file_size:<=10000000 | File size, measured in bytes. Can look up a specific size, or a size range using a combination of Boolean and logical operators ” >=”, “<=”, “=”. |
FILE SYSTEM DATE ACCESSED | atime | atime:2016-12-31
atime:<=2020-01-01 AND atime:>=2016-12-07 | Can look up a specific date, or a date range using a combination of Boolean and logical operators ” >=”, “<=”, “=”. |
FILE SYSTEM DATE CREATED | ctime | ctime:2016-12-31 ctime:<=2020-01-01 AND ctime:>=2016-12-07 | Can look up a specific date, or a date range using a combination of Boolean and logical operators ” >=”, “<=”, “=”. |
FILE SYSTEM DATE MODIFIED | mtime | mtime:2016-12-31 mtime:<=2020-01-01 AND mtime:>=2016-12-07 | Can look up a specific date, or a date range using a combination of Boolean and logical operators ” >=”, “<=”, “=”. |
FILE KEYWORDS | file_fields.keywords | file_fields.keywords:Tragedy |
|
FILE TYPE | file_type | file_type:xlsx | Similar to file_extension, looks up the suggested file extension. |
FILE TYPE NAME | friendly_format_name | friendly_format_name:excel | Attempts to retrieve documents based on natural language search; e.g., “excel” returns .xls and .xlsx documents, “word” returns .doc documents. |
HAS VIRUS | virus_infected | virus_infected:true | see processing_flag:"Has Virus" |
HORIZONTAL DUPLICATE | horizontal_duplicate | horizontal_duplicate:true horizontal_duplicate:false | horizontal - similar to "duplicate"/"file_duplicate," but doesn’t break up families *only works in no-dedupe view |
INTERNAL PATH | internal_path | internal_path:"Top of Personal Folders\symes-k\kate symes 6-27-02\Notes Folders\'sent mail" internal_path:’Top of Personal Folders\symes-k\’ | Searches email folder path, either complete or partial, encased in quotes. |
LANGUAGE | language | language:Hebrew | Looks up the picklist value of the language assigned to documents during processing. |
LOGIKCULL DOCUMENT COMMENTS | comments.body | comments.body:*priv* comments.body:@Joe | Searches the body of Logikcull Comments. |
LOGIKCULL DOCUMENT NOTES | notes | notes:”discuss*” | Searches the body of Logikcull notes. |
LOGIKCULL ID | file_id | file_id:4bb24950405739ec8990f832 | The unique document ID assigned by Logikcull |
MD5 HASH | md5 | md5:15908590ff52044801a5fc4757890f05 | For pulling original + duplicates into search. Can only be used for non-email native items, as this is calculated based upon a bit-by-bit binary calculation. |
NUMBER OF CHILDREN | children | children:5 | Returns documents where the child count (not inclusive of parent) equals the integer provided. |
ORIGINAL DOCUMENT ID | original_id | original_id:4bb24950405739ec8990f832 | see “file_id” |
PAGE COUNT | page_count | page_count:>=50 AND page_count:<=100 page_count:9 | Can look up a specific page count, or a page count range using a combination of Boolean and logical operators ” >=”, “<=”, “=”. |
PARENT ID | parent_id | parent_id:91527d8b026f5e4953306f24 | parent_id is assigned to the child documents of a family and groups them together without pulling in the parent. |
PASSWORD PROTECTED | password_protected | password_protected:true password_protected:false | returns documents based on whether they were password-protected at ingestion. |
REDACTION LABEL | Redaction_label_id | Redaction_label_id:264225 | Looks up the picklist values of Redaction Labels applied. |
SAVED SEARCH | saved_search_id | saved_search_id:1627817 | Saved search can be looked up in the Advanced Search Builder. Converts to an integer value in the search bar. |
SPLIT FROM ID | split_from_id | split_from_id:c594af241185e12a21029066split_from_id: | "Split from file id" metadata is shared between the original and split documents, and is viewable from the document viewer. |
TAGS | tags | tags:Responsive tags:”To Print” | Looks up the picklist string values of tag names. Tags with spaces are required to be wrapped in quotes. |
TEXT | text | “The rain in spain falls mainly on the plain” | Text is the default field searched if no field keys are entered. If a string is not wrapped in quotes, Logikcull assumes an OR operator between terms (e.g., the OR rain OR in OR Spain OR falls …) |
THREAD COUNT | thread_count | thread_count:10 thread_count:>=5 thread_count:>=5 AND thread_count:<=10 | Can look up a specific email thread count, or a thread range using logical operators ” >=”, “<=”, “=”. |
UPLOAD NAME | store_id | store_id:5f6267260a4a5828f0c0e4b3 | Upload Name can be looked up in the Advanced Search Builder. Converts to a Store ID string value in the search bar. |
USERS | authorized_users | authorized_users:”0” NOT authorized_users:”0” | To find all unassigned docs use: authorized_users:"0" |
VERTICAL DUPLICATE | vertical_duplicate | vertical_duplicate:false
| Similar to "duplicate"/"file_duplicate," but within a given custodian and doesn’t break up families. e.g., if I have a standalone file A, and an email B, with attachment A1 which is a copy of A, horizontal dedupe doesn't remove A1 from your view. |
CONTACT ADDRESS | email_fields.contact_business_address | email_fields.contact_business_address:”123 Main St” | Returns matching business address data contained in an Outlook Contact card (VCF) |
CONTACT CELL PHONE | email_fields.contact_cell | email_fields.contact_cell:[phone number] | Returns matching cell phone data contained in an Outlook Contact card (VCF) |
CONTACT COMPANY | email_fields.contact_company | email_fields.contact_company:”Bob’s Llama Saddles” | Returns matching company name data contained in an Outlook Contact card (VCF) |
CONTACT FAX | email_fields.contact_business_fax | email_fields.contact_business_fax:[fax number] | Returns matching fax data contained in an Outlook Contact card (VCF) |
CONTACT NAME | email_fields.contact_name | email_fields.contact_name:”Joe Cull” | Returns matching contact name data contained in an Outlook Contact card (VCF) |
CONTACT PHONE | email_fields.contact_business_phone | email_fields.contact_business_phone:[phone number] | Returns matching business phone data contained in an Outlook Contact card (VCF) |
CONTACT TITLE | email_fields.contact_title | email_fields.contact_title:”CEO” | Returns matching contact title data contained in an Outlook Contact card (VCF) |
EMAIL BCC | email_fields.bcc | email_field.bcc:”John Doe” | Searches the name associated with the BCC field - for example, John Doe. |
EMAIL BCC ADDRESS | email_fields.smtp_bcc | Searches the email address associated with the BCC field - for example, johndoe@gmail.com. | |
EMAIL CC | email_fields.cc | email_fields.cc:”Jane Doe” | Searches the name associated with the CC field - for example, Jane Doe. |
EMAIL CC ADDRESS | email_fields.smtp_cc | Searches the email address associated with the CC field - for example, janedoe@gmail.com. | |
EMAIL CONVERSATION TOPIC | email_fields.conversation_topic | email_fields.conversation_topic:"Cal Prices" | see email_fields.subject |
EMAIL TIME CREATED | email_fields.time_created | email_fields.time_created:2018-08-10
email_fields.time_created:[2018-08-10 TO 2018-08-15] | Looks up the date portion of the combined date/time stamp on the Email created field.. Looks up a range within brackets. |
EMAIL TIME MODIFIED | email_fields.time_modified | email_fields.time_modified:2018-08-10 email_fields.time_modified:[2018-08-10 TO 2018-08-15] | Looks up the date portion of the combined date/time stamp on the Email modified field. Looks up a range within brackets. |
EMAILTIME RECEIVED | email_fields.time_received | email_fields.time_received:2018-08-10 email_fields.time_received:[2018-08-10 TO 2018-08-15] | Looks up the date portion of the combined date/time stamp on the Email received field. Looks up a range within brackets. |
EMAIL TIME SENT | email_fields.time_sent | email_fields.time_sent:2018-08-10 email_fields.time_sent:[2018-08-10 TO 2018-08-15] | Looks up the date portion of the combined date/time stamp on the Email sent field. Looks up a range within brackets. |
EMAIL DOMAINS (ALL) | email_fields.domains | email_fields.domains:liab.ly | Searches all indexed domains in Email sent AND received fields (@gmail.com, @logikcull.com, etc.). Do not include the “@” character. |
EMAIL FROM | email_fields.from | email_fields.from:Joe* email_fields.from:”Joe Cull” | Searches the name associated with the From field - for example, Joe Cull. Exact searches should be wrapped in quotes. |
EMAIL FROM ADDRESS | email_fields.smtp_from | Searches the email address associated with the From field - for example, joe.cull@gmail.com. May sometimes include the contact name. | |
EMAIL FROM DOMAINS(S) | email_fields.from_domain | email_fields.from_domain:google.com | Searches all indexed domains in Email from field. Do not include the “@” character. |
EMAIL HEADER | email_fields.header | email_fields.header:"Message-ID: <DVKJXCNNRSKTP5LJ2UPOFEI2YP2RHA1WA@zlsvr22>" | Searches the combined email metadata. |
EMAIL IMPORTANCE | email_fields.importance | email_fields.importance:2 email_fields.importance:>=1 | Returns email based on ranked importance, where
Low == 0 Normal == 1 High == 2 |
EMAIL MODIFIED BY | email_fields.modified_by | email_fields.modified_by:”Kate Symes”
email_fields.modified_by:Kate* | Searches the name associated with the Email modified by field. Exact searches should be wrapped in quotes. |
EMAIL NORMALIZED SUBJECT | email_fields.normalized_subject | email_fields.normalized_subject:”Price List” | Searches the Normalized Subject field in email metadata. |
EMAIL READ | email_fields.read | email_fields.read:<=10 | Returns results based on the number of times an email was read. |
EMAIL READ RECEIPT | email_fields.read_receipt | email_fields.read_receipt:false | Returns results based on the string value contained in the email read receipt field. Defaults to “False” if there is no read receipt. |
EMAIL RECIP DOMAIN(S) | email_fields.recip_domains | email_fields.recip_domains:gmail.com | Searches across domains of ["to", "smtp_to", "bcc", "smtp_bcc", "cc", "smtp_cc"] fields. |
EMAIL SENDER NAME | email_fields.sender_name | email_fields.sender_name:”Kate Symes” | Searches the name associated with the Email Sender field. Exact searches should be wrapped in quotes. |
EMAIL SENSITIVITY | email_fields.sensitivity | email_fields.sensitivity:>0 |
|
EMAIL SUBJECT | email_fields.subject | email_fields.subject:”Price List” | Searches the Subject field in email metadata. |
EMAIL SUBJECT PREFIX | email_fields.subject_prefix | email_fields.subject_prefix:re*
email_fields.subject_prefix:fwd* | Searches for prefixes applied to a subject line as a result of replying or forwarding a message. |
EMAIL TO | email_fields.to | email_fields.to:Joe*
email_fields.to:”Joe Cull” | Searches the name associated with the Email To field - for example, Joe Cull. |
EMAIL TO ADDRESS | email_fields.smtp_to | Searches the email address associated with the Email To field - for example, joecull@gmail.com. | |
IPM TYPE (Outlook Message Class) | email_fields.ipm_type | email_fields.ipm_type:IPM.Note email_fields.ipm_type:IPM.Schedule.Meeting.Request | Returns search results based on the Outlook message class ID (email message, contact, appointment, etc). IPM.Note == email message. |
OUTLOOK CONVERSATION ID | email_fields.conversation_id | email_fields.conversation_id:a75253516ffed7f714e6bb1f4e0dfad5 | See “Email Conversation ID” |
FILE AUTHOR | file_fields.author | file_fields.author:”Kate Symes”
file_fields.author:Kate* | Returns file author metadata contained in MS Office files |
FILE COMMENTS | file_fields.comment | file_fields.comments:"John Doe" |
|
FILE COMPANY | file_fields.company | file_fields.company:Logikcull |
|
FILE TIME CREATED | file_fields.time_created | file_fields.time_created:2018-08-10 file_fields.time_created:[2018-08-10 TO 2018-08-15] | Looks up the date portion of the combined date/time stamp on the File time created field. Looks up a range within brackets. |
FILE TIME LAST MODIFIED | file_fields.time_modified | file_fields.time_modified:2018-08-10 file_fields.time_modified:[2018-08-10 TO 2018-08-15] | Looks up the date portion of the combined date/time stamp on the File time last modified field. Looks up a range within brackets. |
FILE TIME LAST PRINTED | file_fields.time_printed | file_fields..time_printed:2018-08-10 file_fields.time_printed:[2018-08-10 TO 2018-08-15] | Looks up the date portion of the combined date/time stamp on the File time last printed field. Looks up a range within brackets. |
FILE LAST SAVED BY | file_fields.last_saved_by | file_fields.last_saved_by:”Joe Cull” | Returns matching data on the File last saved by field. |
FILE REVISION NUMBER | file_fields.revision_number | file_fields.revision_number:3 file_fields.revision_number:<=50 | Returns matching number or range based on revision count in the File revision number field. |
FILE TITLE | file_fields.title | file_fields.title:”King Lear” | May be different from the file_name field. |
BATES NUMBER | bates | bates:Prod001-089 bates:[Prod001-089 TO Prod001-101] | Universal Bates search includes imported Bates and Logikcull-generated Bates numbers |