Use operators to refine a search in Vault
Before you begin
-
All search operators must be entered in English, even if people in your organization use other languages to communicate. You can use English search operators to find non-English words and phrases.
-
Vault assumes there is an
AND
operator between search terms if no Boolean operator is specified. - When you use an account name to search for messages or files, always include a colon (:) with no spaces immediately after the operator—for example,
to:username1
in Gmail andowner:username2
in Drive. - When entering multiple values for the same operator, group them together in parentheses—for example,
to:(username1 OR username2)
- Vault can search for words and numbers. You can't search for punctuation marks or symbols.
Find messages that include 2 given search terms.
Examples:
|
Find messages that include either of 2 given search terms (or both).
Examples:
|
Find messages that do not include a given search term.
Examples:
|
Find unknown or wildcard terms.
Examples:
The wildcard ( You can append a wildcard ( Note: If your wildcard entry results in a phrase that exceeds 100 words, the search will fail. Make your search more specific. |
Find messages sent by a given account.
Example:
|
Find messages received by a given account.
Examples:
Vault returns any messages that include the username in the to, cc, or bcc fields. Can also be used to search for group email addresses. |
Find messages where the given account is included in the cc field.
Example:
|
Find messages where the given account is included in the bcc field.
Example:
|
Find messages where the given account is specified as the intended recipient of any replies.
Example:
|
Find messages with a given subject.
Example:
To search for multiple-word subjects, substitute a hyphen ( |
Find messages with a given Gmail label.
Example:
If the label includes spaces, substitute a hyphen ( Note: searching for system-generated labels may return an excessive number of messages. |
Find or exclude messages that have been removed from users' trash but haven't yet been expunged.
|
Find or exclude messages that have been removed from user mailboxes because a retention rule expired.
|
Find or exclude messages that have been quarantined.
|
Find or exclude messages sent with Gmail confidential mode.
|
Find messages sent to or from a group.
Example:
|
Find a message based on the unique identifier of the group the message was sent to.
Example:
List-ID is included in the headers of messages sent to or from Google Groups. To find a message's List-ID, open a message thread in Vault, and then click Original in the upper-right corner. |
Find messages that are in a given folder.
|
Limit search results to classic Hangouts messages only (excludes Gmail messages).
|
Find messages based on their status.
|
Limit search results to messages that were successfully delivered to accounts.
Example:
|
Find only messages that have at least one attachment.
|
Find messages that include attachments with a given file name.
Example:
This search term is case insensitive and supports partial matches and wildcards. |
Find messages that include attachments with the exact file name you specify.
Example:
This search term is case sensitive. |
Find message based on when they were sent or received.
Example:
|
Find messages older or newer than a given period of time.
Example:
Supported periods of time include |
Find messages with a given attachment ID.
Example:
|
Find messages based on their size in bytes, including any attachments.
Example:
You can use |
Find messages smaller or larger than a given size in kilobytes or megabytes, including any attachments.
Example:
Use |
Find messages based on a Message-ID.
Example:
Message-ID is a unique identifier for a message, added added by mail servers. Email clients and servers use this identifier to keep track of a message. You can view the Message-ID header by opening a message in Vault and clicking original. |
Find messages with words near each other.
Example:
Use the number to specify how many words apart the words can be. Add quotes to return only messages in which the first word appears before the second word. This term can't be combined with a wildcard search and can't be used with parentheses or multiple-word phrases. |
Find files that include 2 given search terms.
|
Find files that include either of 2 given search terms (or both).
|
Find files that do not include a given search term.
|
Find files owned by a given account.
|
Find files shared by a given account.
|
Find files shared with a given account.
|
Find files that users have marked with a star.
|
Find or exclude files that users have moved to trash.
|
Find a given file type.
Supported file types:
|
Find files based on when they were edited.
|
Find files based on their title.
|
Note: Hangouts Chat doesn't support Boolean operators or terms that are enclosed in quotes.
Find direct messages sent by a user and threads the user participated in.
You must include the full account name, including the domain. |
Find threads and messages that include a specific type of content.
Supported content types:
|
Find threads that mention a given user.
You must include the full account name, including your organization's domain. |
Find message threads based on when they were sent or updated.
Dates are exclusive. UTC is used unless you use the |
Find messages older or newer than a given period of time.
Supported periods of time include UTC is used unless you use the |
Specify a time zone for date- and time-based searches.
Specify the time zone with |
Search only direct messages or only messages in chat rooms.
|
Find messages that match one or more keywords.
Matches each keyword exactly. For example, a search that includes |
Exclude messages that contain one or more keywords.
Matches each keyword exactly. For example, a search that includes |