Archive Extra Search Query

for G Suite Office 365

 

Question

We have created some users with Search Restriction. The Search Policy can set the "Search Period Allowed" and "Search Address Allowed", but what is the "Extra Search Query" field for?

 

Answer

Below are some examples of settings that can be done in Extra Search Query.

For reference on Basic Search Restriction: How can I restrict users to only able to search for specific email addresses?

 

Example 1
Requirement : Apply search restriction to allow search for email with attachment file only.
・Value in Extra Search Query :

(file "true")

Example 2
Requirement : Exclude CEO members from being included in the allowed Search range (taro@hde.co.jp, jiro@hde.co.jp, sabu@hde.co.jp) 
・Value in Extra Search Query :

(NOT
(OR
(rcpt_to (IN "taro@hde.co.jp" "jiro@hde.co.jp" "sabu@hde.co.jp"))
(to (IN "taro@hde.co.jp" "jiro@hde.co.jp" "sabu@hde.co.jp"))
(cc (IN "taro@hde.co.jp" "jiro@hde.co.jp" "sabu@hde.co.jp"))
(from (IN "taro@hde.co.jp" "jiro@hde.co.jp" "sabu@hde.co.jp"))
(mail_from (IN "taro@hde.co.jp" "jiro@hde.co.jp" "sabu@hde.co.jp"))))

Example 3
Requirement : Allow search only for emails that "user@hde.co.jp" have sent out and received externally
・Value in Extra Search Query :

(OR (AND (rcpt_to "user@hde.co.jp") (mail_from (NE "@hde.co.jp")))
(AND (mail_from "user@hde.co.jp") (rcpt_to (NE "@hde.co.jp"))))

Example 4
Requirement : Allow search only for emails that "user@hde.co.jp" have sent out and received externally and only emails that have attachment file
・Value in Extra Search Query

(AND (file "true")
(OR (AND (rcpt_to "user@hde.co.jp") (mail_from (NE "@hde.co.jp")))
(AND (mail_from "user@hde.co.jp") (rcpt_to (NE "@hde.co.jp")))))

【Precautions】
Note that if the Extra Search Query is being set with complicated multiple search restrictions, the search engine may take longer time to produce the result. We recommend you to keep the extra search query simple.

If you have other special requirements, please contact our Support Team.

 

          
Was this article helpful?

Frequently Asked Questions (FAQs)

Powered by Zendesk