Field Name

Search Field

Example

Notes

CUSTODIAN

custodian_id

custodian_id:35605

Custodian can be looked up in the Advanced Search Builder, and once you’ve run this search it is then converted to an integer value in the search bar.

DEDUPLICATION CHECKSUM

deduplication_checksum

deduplication_checksum:60b07eec186c8565f16e4dc93a9aba7c

Useful for pulling original + duplicates into search. Can be used for both non-email and email native records. String = hash value.

DOCUMENT DATE

document_date

document_date:>=2010-01-01 AND document_date:<=2020-01-02

Can look up a specific date, or a date range using a combination of Boolean and logical operators ” >=”, “<=”, “=”

DOCUMENT TYPE

document_type

document_type:Email

document_type:Spreadsheet

Uses picklist values contained in the Advanced Search and Filter Carousel to search document types.

DOWNLOAD DOC ID

exports.download_doc_id

exports.download_doc_id:"Prod001-080"

Searches page-level documents downloaded within Logikcull, using the download document ID assigned during the download process.

DOWNLOAD NAME

exports.download_id

exports.download_id:5e568905f30a38613267353a

Download name can be looked up in the Advanced Search Builder. Converts to a string value in the search bar.

DOWNLOADED

exported

exported:true

exported:false

Filters search results based on whether documents were downloaded in Logikcull using a Boolean value True or False.

DUPLICATE

file_duplicate

file_duplicate:false

file_duplicate:true

Returns either the first instance of duplicate documents or, with dedupe turned off, the duplicates of the first instance of a document.

file_duplicate:false will only return a single instance of any given file for a project.

EMAIL CONVERSATION ID

email_fields.conversation_id

conversation_id:01c9d20665514476acb100604bf29d1897964399f69e

In the document viewer, Metadata field = “Outlook Conversation ID” (See Email Thread ID).

EMAIL RECIPIENTS

email_recipients

email_recipients:*@logik.com

email_recipients:"Judy Dyer"

Searches all email recipient fields:

["to", "smtp_to", "bcc", "smtp_bcc", "cc", "smtp_cc"].

EMAIL SENDER

email_sender

email_sender:*@logik.com

email_sender:”Judy Dyer”

Searches all email sender fields:

["from", "smtp_from"].

EMAIL SENDER OR RECIPIENTS

email_participants

email_participants:*@logik.com

email_participants:”Judy Dyer”

Searches all email recipient and sender fields at the same time:

["from", "smtp_from", "to", "smtp_to", "bcc", "smtp_bcc", "cc", "smtp_cc"].

EMAIL THREAD ID

thread_id

thread_id:01c9d20665514476acb100604bf29d1897964399f69e

In the document viewer, Metadata field = “Outlook Conversation ID” (see Email Conversation ID).

FAMILY CHECKSUM

family_checksum

family_checksum:bf75df4f252be23aaa7f164edfd18970

Uses the hash value assigned during document processing.

FAMILY COUNT

family_count

family_count:3

Returns documents where total family count (inclusive of parent and child(ren) equals the integer provided.

FAMILY DATE

family_date

family_date:>=2010-01-01 AND family_date:<=2020-01-02

All documents in a family inherit the document date of the parent as family_date.

Can look up a specific date, or a date range using a combination of Boolean and logical operators ” >=”, “<=”, “=”.

FAMILY ID

family_id

family_id:4bb24950405739ec8990f832

All documents in a family inherit the document ID of the parent as family_ID.

FAMILY STATUS

family_status

family_status:"Is Parent”

family_status:”Is Child”

family_status:”Is Standalone”

Returns documents based on family status.

FIELD CHECKSUM

field_checksum

field_checksum:61a1583c5d3b4854b4a1c0e4672347d2

Searches the Hash value.

FILE EXTENSION

file_extension

file_extension:msg

Searches the file extension contained in the file_name field; e.g., “Please Read this email.msg”.

FILE NAME

file_name

file_name:“Please Read this email.msg”

Searches the document file name field.

FILE PATH

file_path

file_path:"\Collection.zip\2018\001_Mail_PST\”

file_path:"001_Mail_PST\"

Partial file paths can be searched by wrapping in quotes.

FILE SIZE

file_size

file_size:>=2400000

file_size:>=240000 AND file_size:<=10000000

File size, measured in bytes. Can look up a specific size, or a size range using a combination of Boolean and logical operators ” >=”, “<=”, “=”.

FILE SYSTEM DATE ACCESSED

atime

atime:2016-12-31

atime:<=2020-01-01 AND atime:>=2016-12-07

Can look up a specific date, or a date range using a combination of Boolean and logical operators ” >=”, “<=”, “=”.

FILE SYSTEM DATE CREATED

ctime

ctime:2016-12-31

ctime:<=2020-01-01 AND ctime:>=2016-12-07

Can look up a specific date, or a date range using a combination of Boolean and logical operators ” >=”, “<=”, “=”.

FILE SYSTEM DATE MODIFIED

mtime

mtime:2016-12-31

mtime:<=2020-01-01 AND mtime:>=2016-12-07

Can look up a specific date, or a date range using a combination of Boolean and logical operators ” >=”, “<=”, “=”.

FILE KEYWORDS

file_fields.keywords

file_fields.keywords:Tragedy

FILE TYPE

file_type

file_type:xlsx

Similar to file_extension, looks up the suggested file extension.

FILE TYPE NAME

friendly_format_name

friendly_format_name:excel

Attempts to retrieve documents based on natural language search; e.g., “excel” returns .xls and .xlsx documents, “word” returns .doc documents.

HAS VIRUS

virus_infected

virus_infected:true

see processing_flag:"Has Virus"

HORIZONTAL DUPLICATE

horizontal_duplicate

horizontal_duplicate:true

horizontal_duplicate:false

horizontal - similar to "duplicate"/"file_duplicate," but doesn’t break up families
e.g., if I have a standalone file A, and an email B, with attachment A1 which is a copy of A, horizontal dedupe doesn't remove A1 from your view.

*only works in no-dedupe view

INTERNAL PATH

internal_path

internal_path:"Top of Personal Folders\symes-k\kate symes 6-27-02\Notes Folders\'sent mail"

internal_path:’Top of Personal Folders\symes-k\’

Searches email folder path, either complete or partial, encased in quotes.

LANGUAGE

language

language:Hebrew

Looks up the picklist value of the language assigned to documents during processing.

LOGIKCULL DOCUMENT COMMENTS

comments.body

comments.body:*priv*

comments.body:@Joe

Searches the body of Logikcull Comments.

LOGIKCULL DOCUMENT NOTES

notes

notes:”discuss*”

Searches the body of Logikcull notes.

LOGIKCULL ID

file_id

file_id:4bb24950405739ec8990f832

The unique document ID assigned by Logikcull

MD5 HASH

md5

md5:15908590ff52044801a5fc4757890f05

For pulling original + duplicates into search. Can only be used for non-email native items, as this is calculated based upon a bit-by-bit binary calculation.

NUMBER OF CHILDREN

children

children:5

Returns documents where the child count (not inclusive of parent) equals the integer provided.

ORIGINAL DOCUMENT ID

original_id

original_id:4bb24950405739ec8990f832

see “file_id”

PAGE COUNT

page_count

page_count:>=50 AND page_count:<=100

page_count:9

Can look up a specific page count, or a page count range using a combination of Boolean and logical operators ” >=”, “<=”, “=”.

PARENT ID

parent_id

parent_id:91527d8b026f5e4953306f24

parent_id is assigned to the child documents of a family and groups them together without pulling in the parent.

PASSWORD PROTECTED

password_protected

password_protected:true

password_protected:false

returns documents based on whether they were password-protected at ingestion.

QC TAGS

processing_flag

processing_flag:"Last Email" AND processing_flag:"Has Threads"

Looks up the picklist values of QC Tags applied by Logikcull during document processing.

REDACTION LABEL

Redaction_label_id

Redaction_label_id:264225

Looks up the picklist values of Redaction Labels applied.

SAVED SEARCH

saved_search_id

saved_search_id:1627817

Saved search can be looked up in the Advanced Search Builder. Converts to an integer value in the search bar.

SPLIT FROM ID

split_from_id

split_from_id:c594af241185e12a21029066split_from_id:

"Split from file id" metadata is shared between the original and split documents, and is viewable from the document viewer.

TAGS

tags

tags:Responsive

tags:”To Print”

Looks up the picklist string values of tag names. Tags with spaces are required to be wrapped in quotes.

TEXT

text

“The rain in spain falls mainly on the plain”

Text is the default field searched if no field keys are entered. If a string is not wrapped in quotes, Logikcull assumes an OR operator between terms (e.g., the OR rain OR in OR Spain OR falls …)

THREAD COUNT

thread_count

thread_count:10

thread_count:>=5

thread_count:>=5 AND thread_count:<=10

Can look up a specific email thread count, or a thread range using logical operators ” >=”, “<=”, “=”.

UPLOAD NAME

store_id

store_id:5f6267260a4a5828f0c0e4b3

Upload Name can be looked up in the Advanced Search Builder. Converts to a Store ID string value in the search bar.

USERS

authorized_users

authorized_users:”0”

NOT authorized_users:”0”

To find all unassigned docs use: authorized_users:"0"
To find all assigned docs use: NOT authorized_users:"0"

VERTICAL DUPLICATE

vertical_duplicate

vertical_duplicate:false


vertical_duplicate:true

Similar to "duplicate"/"file_duplicate," but within a given custodian and doesn’t break up families.

e.g., if I have a standalone file A, and an email B, with attachment A1 which is a copy of A, horizontal dedupe doesn't remove A1 from your view.

CONTACT ADDRESS

email_fields.contact_business_address

email_fields.contact_business_address:”123 Main St”

Returns matching business address data contained in an Outlook Contact card (VCF)

CONTACT CELL PHONE

email_fields.contact_cell

email_fields.contact_cell:[phone number]

Returns matching cell phone data contained in an Outlook Contact card (VCF)

CONTACT COMPANY

email_fields.contact_company

email_fields.contact_company:”Bob’s Llama Saddles”

Returns matching company name data contained in an Outlook Contact card (VCF)

CONTACT FAX

email_fields.contact_business_fax

email_fields.contact_business_fax:[fax number]

Returns matching fax data contained in an Outlook Contact card (VCF)

CONTACT NAME

email_fields.contact_name

email_fields.contact_name:”Joe Cull”

Returns matching contact name data contained in an Outlook Contact card (VCF)

CONTACT PHONE

email_fields.contact_business_phone

email_fields.contact_business_phone:[phone number]

Returns matching business phone data contained in an Outlook Contact card (VCF)

CONTACT TITLE

email_fields.contact_title

email_fields.contact_title:”CEO”

Returns matching contact title data contained in an Outlook Contact card (VCF)

EMAIL BCC

email_fields.bcc

email_field.bcc:”John Doe”

Searches the name associated with the BCC field - for example, John Doe.

EMAIL BCC ADDRESS

email_fields.smtp_bcc

email_fields.smtp_bcc:johndoe@gmail.com

Searches the email address associated with the BCC field - for example, johndoe@gmail.com.

EMAIL CC

email_fields.cc

email_fields.cc:”Jane Doe”

Searches the name associated with the CC field - for example, Jane Doe.

EMAIL CC ADDRESS

email_fields.smtp_cc

email_fields.smtp_cc:janedoe@gmail.com

Searches the email address associated with the CC field - for example, janedoe@gmail.com.

EMAIL CONVERSATION TOPIC

email_fields.conversation_topic

email_fields.conversation_topic:"Cal Prices"

see email_fields.subject

EMAIL TIME CREATED

email_fields.time_created

email_fields.time_created:2018-08-10

email_fields.time_created:[2018-08-10 TO 2018-08-15]

Looks up the date portion of the combined date/time stamp on the Email created field.. Looks up a range within brackets.

EMAIL TIME MODIFIED

email_fields.time_modified

email_fields.time_modified:2018-08-10

email_fields.time_modified:[2018-08-10 TO 2018-08-15]

Looks up the date portion of the combined date/time stamp on the Email modified field. Looks up a range within brackets.

EMAILTIME RECEIVED

email_fields.time_received

email_fields.time_received:2018-08-10

email_fields.time_received:[2018-08-10 TO 2018-08-15]

Looks up the date portion of the combined date/time stamp on the Email received field. Looks up a range within brackets.

EMAIL TIME SENT

email_fields.time_sent

email_fields.time_sent:2018-08-10

email_fields.time_sent:[2018-08-10 TO 2018-08-15]

Looks up the date portion of the combined date/time stamp on the Email sent field. Looks up a range within brackets.

EMAIL DOMAINS (ALL)

email_fields.domains

email_fields.domains:liab.ly

Searches all indexed domains in Email sent AND received fields (@gmail.com, @logikcull.com, etc.). Do not include the “@” character.

EMAIL FROM

email_fields.from

email_fields.from:Joe*

email_fields.from:”Joe Cull”

Searches the name associated with the From field - for example, Joe Cull. Exact searches should be wrapped in quotes.

EMAIL FROM ADDRESS

email_fields.smtp_from

email_fields.smtp_from:joe.cull@gmail.com

Searches the email address associated with the From field - for example, joe.cull@gmail.com. May sometimes include the contact name.

EMAIL FROM DOMAINS(S)

email_fields.from_domain

email_fields.from_domain:google.com

Searches all indexed domains in Email from field. Do not include the “@” character.

EMAIL HEADER

email_fields.header

email_fields.header:"Message-ID: <DVKJXCNNRSKTP5LJ2UPOFEI2YP2RHA1WA@zlsvr22>"

Searches the combined email metadata.

EMAIL IMPORTANCE

email_fields.importance

email_fields.importance:2

email_fields.importance:>=1

Returns email based on ranked importance, where

Low == 0

Normal == 1

High == 2

EMAIL MODIFIED BY

email_fields.modified_by

email_fields.modified_by:”Kate Symes”

email_fields.modified_by:Kate*

Searches the name associated with the Email modified by field. Exact searches should be wrapped in quotes.

EMAIL NORMALIZED SUBJECT

email_fields.normalized_subject

email_fields.normalized_subject:”Price List”

Searches the Normalized Subject field in email metadata.

EMAIL READ

email_fields.read

email_fields.read:<=10

Returns results based on the number of times an email was read.

EMAIL READ RECEIPT

email_fields.read_receipt

email_fields.read_receipt:false

Returns results based on the string value contained in the email read receipt field. Defaults to “False” if there is no read receipt.

EMAIL RECIP DOMAIN(S)

email_fields.recip_domains

email_fields.recip_domains:gmail.com

Searches across domains of ["to", "smtp_to", "bcc", "smtp_bcc", "cc", "smtp_cc"] fields.

EMAIL SENDER NAME

email_fields.sender_name

email_fields.sender_name:”Kate Symes”

Searches the name associated with the Email Sender field. Exact searches should be wrapped in quotes.

EMAIL SENSITIVITY

email_fields.sensitivity

email_fields.sensitivity:>0

EMAIL SUBJECT

email_fields.subject

email_fields.subject:”Price List”

Searches the Subject field in email metadata.

EMAIL SUBJECT PREFIX

email_fields.subject_prefix

email_fields.subject_prefix:re*

email_fields.subject_prefix:fwd*

Searches for prefixes applied to a subject line as a result of replying or forwarding a message.

EMAIL TO

email_fields.to

email_fields.to:Joe*

email_fields.to:”Joe Cull”

Searches the name associated with the Email To field - for example, Joe Cull.

EMAIL TO ADDRESS

email_fields.smtp_to

email_fields.smtp_to:joecull@gmail.com

Searches the email address associated with the Email To field - for example, joecull@gmail.com.

IPM TYPE (Outlook Message Class)

email_fields.ipm_type

email_fields.ipm_type:IPM.Note email_fields.ipm_type:IPM.Schedule.Meeting.Request

Returns search results based on the Outlook message class ID (email message, contact, appointment, etc). IPM.Note == email message.

https://docs.microsoft.com/en-us/office/vba/outlook/concepts/forms/item-types-and-message-classes

OUTLOOK CONVERSATION ID

email_fields.conversation_id

email_fields.conversation_id:a75253516ffed7f714e6bb1f4e0dfad5

See “Email Conversation ID”

FILE AUTHOR

file_fields.author

file_fields.author:”Kate Symes”

file_fields.author:Kate*

Returns file author metadata contained in MS Office files

FILE COMMENTS

file_fields.comment

file_fields.comments:"John Doe"

FILE COMPANY

file_fields.company

file_fields.company:Logikcull

FILE TIME CREATED

file_fields.time_created

file_fields.time_created:2018-08-10

file_fields.time_created:[2018-08-10 TO 2018-08-15]

Looks up the date portion of the combined date/time stamp on the File time created field. Looks up a range within brackets.

FILE TIME LAST MODIFIED

file_fields.time_modified

file_fields.time_modified:2018-08-10

file_fields.time_modified:[2018-08-10 TO 2018-08-15]

Looks up the date portion of the combined date/time stamp on the File time last modified field. Looks up a range within brackets.

FILE TIME LAST PRINTED

file_fields.time_printed

file_fields..time_printed:2018-08-10

file_fields.time_printed:[2018-08-10 TO 2018-08-15]

Looks up the date portion of the combined date/time stamp on the File time last printed field. Looks up a range within brackets.

FILE LAST SAVED BY

file_fields.last_saved_by

file_fields.last_saved_by:”Joe Cull”

Returns matching data on the File last saved by field.

FILE REVISION NUMBER

file_fields.revision_number

file_fields.revision_number:3

file_fields.revision_number:<=50

Returns matching number or range based on revision count in the File revision number field.

FILE TITLE

file_fields.title

file_fields.title:”King Lear”

May be different from the file_name field.

BATES NUMBER

bates

bates:Prod001-089

bates:[Prod001-089 TO Prod001-101]

Universal Bates search includes imported Bates and Logikcull-generated Bates numbers

Did this answer your question?