How the heck do a search for a phrase in the body of an email!?!

[thecomputerguy]

I have a client who is involved in a lawsuit and they asked me to provide them with all of the emails from a period of time containing specific words or phrases in a mailbox.

I pull up search tools > advanced find > then advanced tab

For example I'm searching for the term "Amazon Prime"

I define the field as "Message" define the condition as "Phrase Matches" and the value as Amazon Prime

I hit search and I get results of anything with Amazon in it or Prime in it.

So I change it to "Amazon Prime"

Same result...

So I change it to ""Amazon Prime""

Same result!

I just want search results from the body, the subject and the sent/received of about 10 specific terms ... how do I do that?

I don't want results from the Amazon Rain Forest, or Amazon Women I want specifically AMAZON PRIME

Outlook w/ Office 365

 

[thecomputerguy]

Tried this... key does not exist

https://support.microsoft.com/en-us...-when-you-use-double-quotation-marks-to-searc

 

[mikeroq]

You'll need to create the key.

 

[thecomputerguy]

You'll need to create the key.

The path does not even exist past ....

HKCU\Software\Policies\Microsoft

 

[mikeroq]

Yea you have to make the keys.

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\16.0\Outlook\Search]
"AllowPhraseMatch"=dword:00000001

 

[Markverhyden]

Is this just related to an Amazon purchase or were you using that as an example? Traditionally searches supported Boolean operands. What is the email client and version?

 

[thecomputerguy]

Is this just related to an Amazon purchase or were you using that as an example? Traditionally searches supported Boolean operands. What is the email client and version?

Sorry this is Outlook installed by O365, I used Amazon Prime as an example. The search parameters include various terms/phrases including single word and multi-word phrases as well as people. The terms need to be searched through multiple mailboxes so I was hoping to be able to define all of the terms required and then just search the applicable mailboxes using those advanced search terms so I wouldn't have to re-create the search terms over and over again.

 

[thecomputerguy]

Yea you have to make the keys.

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\16.0\Outlook\Search]
"AllowPhraseMatch"=dword:00000001

Did this and searching is still populating for both words :X

 

[thecomputerguy]

Is this just related to an Amazon purchase or were you using that as an example? Traditionally searches supported Boolean operands. What is the email client and version?

Also I'm doing this by setting up all of the accounts in my own copy of Outlook with cached mode disabled so I have direct access to all of the emails directly on the server. I'm not sure if that's the correct way to do this but that seemed to be the most logical to me.

 

[thecomputerguy]

Also I didn't mean to put this in TEO I'm just scrambling around I meant to post this in tech to tech help if a mod happens to drop by.

 

[Markverhyden]

Don't have time to do look ups, swamped. But I'm sure that there must be a plugin for Outlook to do this. It's not like this is something new.

 

[thecomputerguy]

Essentially I want to search for the following terms as an example...

Inbox:
- Anything sent from John Smith
- Anything sent from David Walker
- Anything with the Subject of "Amazon Prime"
- Anything that contains "Amazon Prime" In the body
- Anything that contains "Router" in the Subject
- Anything that contains "Router" in the Body

 

[mikeroq]

In my Outlook (Office 365 1909) using the search box and searching a phrase like "your payment" returns results as expected.

You said this is Office 365 email?

Maybe you should put a litigation hold on the time period in question. Then you can use tools in Office 365 to search for the emails in question.

https://docs.microsoft.com/en-us/microsoft-365/compliance/manage-legal-investigations

https://docs.microsoft.com/en-us/microsoft-365/compliance/content-search

https://docs.microsoft.com/en-us/microsoft-365/compliance/export-search-results

 

[Sky-Knight]

Litigation hold is only an option on E plans... so likely not there. You need Exchange Online Plan 2 entitlements for that, and all of the SMB plans are Plan 1.

As for the rest... https://protection.office.com/contentsearchbeta?ContentOnly=1

This is what the Security & Compliance center is for! Use it!

 

[Mick]

Get yourself a copy of The Bat. Job done...

 

[Kitten Kong]

Also I didn't mean to put this in TEO I'm just scrambling around I meant to post this in tech to tech help if a mod happens to drop by.

Thread moved to try.