7.1 Search Criteria

This feature lets GWF administrators save often used searches. GWF has several default searches installed as examples.

The Open Search Criteria button presents a new window with search scripts for your selection.

The default example searches are:

  • Default – Empty (any search criteria)

  • Date Range –1-5-2005 and 1-10-2005

  • Too Big – All mail larger than 2 MB

  • Unwanted attachments – All mail with non business-related attachments like mp3 and avi

  • Unwanted senders – All mail from unwanted senders that have attachments

Click the Execute button to run the search

The last search can be saved by clicking the Save search criteria button.

You will be asked to name the search, and provide a description. Click OK once the description has been entered. Please use a plain text description that will be easy to understand in the future.

Clicking Search now will show your saved search in the list of available actions.

NOTE:Searches are stored in the C:\Program Files (x86)\Micro Focus\GroupWise Forensics 18.0\searches directory and can be directly edited by the more technically-minded.