Email Segment Search Syntax

IN THIS ARTICLE:

NOTE: The Email Segment Search Syntax is unavailable for this MVP release.

Email Segment Sub-Streams

The email segment sub-streams covered in this Search Syntax article include: From, To, Cc, Bcc, Date, Subj, Header (From, To, Cc, Bcc, Date, Subj), Partic (From, To, Cc, Bcc), Dist (To, Cc, Bcc) Body (Does not include header), Bodytrim (Body does not include header, minus Repeated_Content).

Email Segment Search Term Examples
This syntax runs over offset metadata in the body of a document (it does not run over metadata fields), and it only runs over documents that have been defined as emails (documents with an email header at the top of the body).

1. m/esegment: Parker

  • Returns documents with Parker in any email header or in the body of an email.
  • Does not return Parker in the email metadata fields or in the body of a non-email.
  • This is the same as running:
    • m/eheader: Parker OR m/ebody: Parker

2. m/esegment: @header: Parker

  • Returns documents with Parker in any email header.
  • Does not return Parker in the email metadata fields.
  • This is the same as running:
    • m/eheader: Parker
    • m/esegment@header: Parker

3. m/esegment: @from: Smith

  • Returns documents with Smith in the From field in any email header.
  • Does not return Smith in the Email_From metadata field.
  • This is the same as running:
    • m/eheader: @from: Smith
    • m/eheader@from: Smith
    • m/esegment@from: Smith

4. m/esegment: @dist: Smith OR Johnson

  • Returns documents with Smith or Johnson in the To, Cc, or Bcc fields in the same email header.
  • Does not return Smith or Johnson in the Email_To, Email_Cc, or Email_Bcc metadata fields.
  • This is the same as running:
    • m/eheader: @dist: Smith OR Johnson
    • m/eheader@dist: Smith OR Johnson
    • m/esegment@dist: Smith OR Johnson

5. m/esegment: @partic: Smith AND Johnson

  • Returns documents with both Smith and Johnson in the From, To, Cc, or Bcc fields in the same email header.
  • Does not return Smith and Johnson in the Email_From, Email_To, Email_Cc, or Email_Bcc metadata fields.
  • This is the same as running:
    • m/eheader: @partic: Smith AND Johnson
    • m/eheader@partic: Smith AND Johnson
    • m/esegment@partic: Smith AND Johnson

6. m/esegment: @from: Smith AND @dist: Brown

  • Returns documents with Smith in the From field and with Johnson in the To, Cc, or Bcc fields in the same email header.
  • Does not return Smith or Brown in the Email_From, Email_To, Email_Cc, or Email_Bcc metadata fields.
  • This is the same as running:
    • m/eheader: @from: Smith AND @dist: Brown

7. m/esegment: @from: Smith AND @dist: Brown AND @date: tc(date = 3/25/15)

  • Returns documents with Smith in the From field, with Johnson in the To, Cc, or Bcc fields, and with 3/25/15 in sent date, all in the same email header.
  • Does not return Smith or Brown in the Email_From, Email_To, Email_Cc, Email_Bcc metadata fields, or 3/25/15 Date_Sent metadata field.
  • This is the same as running:
    • m/eheader: @from: Smith AND @dist: Brown AND @date: tc(date = 3/25/15)

8. m/esegment: (@from: Smith OR Johnson) AND (@dist: Lopez AND Parker) AND (@subj: meeting)

  • Returns documents with Smith or Johnson in the From field, with Lopez, and Parker in the To, Cc, or Bcc fields, and with meeting in the Subject field, all in the same email header.
  • Does not return Smith, Johnson, Lopez, Parker, or update in the Email_From, Email_To, Email_Cc, Email_Bcc, or Email_Subject metadata fields.
  • This is the same as running:
    • m/eheader: (@from: Smith OR Johnson) AND (@dist: Lopez AND Parker) AND (@subj: meeting)

9. m/esegment: (@from: Smith OR Johnson) AND (@dist: Brown OR Lopez OR Williams) AND (@subj: meeting) AND (@body: update)

  • Returns documents with Smith or Johnson in the From field, with Brown, Lopez, or Williams in the To, Cc, or Bcc fields, with meeting in the Subject field, and with update in the email body, all in the same email segment.
    • Will hit update in the repeated content (in the same email segment).
  • Does not return Smith, Johnson, Brown, Lopez, Williams, or update in the Email_From, Email_To, Email_Cc, Email_Bcc, or Email_Subject metadata fields.
  • This is not possible to do with m/eheader syntax.

10. m/esegment: (@from: Smith OR Johnson) AND (@dist: Brown OR Lopez OR Williams) AND (@subj: meeting) AND (@bodytrim: confidential)

  • Returns documents with Smith or Johnson in the From field, with Brown, Lopez, or Williams in the To, Cc, or Bcc fields, with meeting in the Subject field, and with confidential in the email body_trimmed, all in the same email segment.
    • Will not hit confidential in the repeated content.
  • Does not return Smith, Johnson, Brown, Lopez, Williams, or update in the Email_From, Email_To, Email_Cc, Email_Bcc, or Email_Subject metadata fields.
  • This is not possible to do with m/eheader syntax.