Viewing previously executed but unsaved searches during an investigation
While investigating data references, you may often run a search and retrieve the data, but knowingly or unknowingly do not save it. In such scenarios, the application logs the search under Investigation > Managed Accounts > Previous Searches node. This allows you to refer to your previously executed but unsaved searches when needed. You can rerun the same search and save it for future investigative purposes.
To view previously executed but unsaved searches during an investigation
-
In the left navigation pane, select Investigation>Managed Accounts>Previous Searches node.
A list of previously executed but unsaved searches during investigation appears. Use the page navigation arrows to access cases displayed on other pages.
-
To retrieve the search result, click Rerun Search in theAction column of the row corresponding to the search you want to run again.
-
If needed, do the following:
-
Click Save Search for future investigative purposes.
-
Click Send to Case to send the review items retrieved in a search to one or more cases available in theeDiscovery tab, while keeping a copy of items in theInvestigation tab.
-
Note: For AI-enabled cases,Send to Case supports only email items, and any non-email items (such as files and collaboration messages) are automatically skipped.
Note: Department Reviewers may encounter certain role-specific limitations. For details, ; these are known, low-impact issues targeted for resolution in the next release.
Related information