DISCO search manual

Includes results with both terms

Example: contract & payment — Documents that contain both contract and payment

Includes results with either terms or fields

Example: contract payment — Documents that contain contract or payment

Excludes term or field from results

Example: contract % payment — Documents that contain contract but not containing payment

Proximity search, searching within n words

Example: contract /10 payment — Documents that contain contract and payment within ten words of each other (in any order)

Exact phrase intended

Example: “contract payment” — Documents that contain the exact phrase contract payment

Truncation search or root expander

Example: contract! — Documents that contain any term starting with contract, for example, contract, contracts, contractual, contracting, or contracted

Wildcard search for single character

Example: contract* — Searches for words that have one — but only one — character after contract, such as contracts, but not contracted, contractual or contract

Fuzzy or approximate word search

Example: guaranty~ — Searches for guaranty, guarantee, garantee, garanty, and similar (mis)spellings

Grouping syntax

Example: (failure & consideration) & (contract agreement) — Documents must contain both failure and consideration and the results must have either contract or agreement

Returns n documents randomly selected from results of search. If n is less than 1, this number is treated as a percentage.

Example: sample(.5, contract) — Returns 50% of the search results for contract at random.

sample(700, contract) — Returns 700 randomly selected documents from the search results for contract.

Field searching (see below for standard DISCO fields)

Example: custodian(Holcombe) — Holcombe in the custodian field

Field of Bates numbers applied to documents (either from DISCO production or from elsewhere)

Examples: batesnumber(Enron000009) — A document receiving the Bates stamp Enron000009

batesnumber(Enron000007 to Enron000950) — Documents with Bates numbers within the identified range

English portion of the Bates stamp

Example: batesprefix(Enron) — Documents that use Enron as a Bates prefix

Identification number assigned by DISCO which is unique to each document in the database

Example: id(1200) — The document with DISCO identification number 1200

Name or number assigned to each set of documents produced using DISCO

Examples: production("defense") — Documents produced in the production set "defense"

production(productions/2) — Documents produced in the second production set

Number assigned to each group of documents ingested into DISCO

Example: ingestsessionid("IngestSessions/1") — Documents ingested into DISCO in Ingest Session 1

Optional identification number users can assign (contact DISCO Support to do so)

Example: referenceid(245) — Document with Reference ID number 245

The unique identifier used to deduplicate documents at the time of ingest
Example: eDeDupHash(ABC123) — Document with deduplication hash ABC123

The document note field is appended to documents manually by DISCO users and fully searchable after creation

Example: documentnote(hot) — Documents with hot in the document note field

Custom metadata field added by admin level users and is used to capture additional information

Examples: fields(important) — Documents with important in any field

more about custom fields

Folder created in DISCO by a user

Examples: folder("Hot Documents") — Documents in the DISCO folder "Hot Documents"

folder("Hot Documents/Experts") — Documents in the subfolder "Experts"

folder("Hot Documents/!") — Documents in folder "Hot Documents" and all subfolders

Privilege Note is a user created field that will appear on privilege logs (such as a reason for the privilege assertion)

Example: privilegenote("Legal Advice") — Documents using the phrase "Legal Advice" inside the privilege note

Redaction reasons are optional user-created text that can overlay redactions when produced

Example: redactionreason("Trade Secret") — Documents with "Trade Secret" applied as a redaction reason

A "review stage" is a set of documents created by users for linear review

Example: stage("First Pass Review") — Documents in the stage "First Pass Review"

Documents in stages are pulled by a reviewer in "batches"

Example: stagebatched("First Pass Review") — Documents in the stage First Pass Review that have been placed in batches (whether or not yet reviewed)

After documents are marked "reviewed" in a stage, they are complete

Example: stagecomplete("First Pass Review") — Documents in the stage "First Pass Review" that have been marked reviewed (i.e., complete)

Tags are user-added fields appended to documents by users

Example: tag(responsive) — Documents with the tag "responsive"

Metadata field identifying the author or creator of a file (note: does not include the sender of an email)

Example: author(Jones) — All documents which "Jones" authored

Metadata field for a recipient that was "blind copied" (or "blind carbon copied") on an email

Example: bcc(Frank) — All emails where "Frank" (first or last name) is blind copied

Metadata field for "copied" (or "carbon copied") on an email

Examples: cc(Thomas) — All emails where "Thomas" (either as a first or last name) is copied

cc("Frank Thomas") — All emails where "Frank Thomas" is copied

Metadata field of a custodian (typically the individual or location from which a document was collected)

Example: custodian(Peterson) — All documents where "Peterson" is in the custodian name field

Metadata field of an exact custodian name

Example: custodianexact("Andrew Lewis") — All documents where exactly "Andrew Lewis" is the custodian

Metadata field of an email domain

Example: domain(winlaw.com) — Returns all emails sent to or from email addresses (also including cc and bcc fields) having "winlaw.com" as the domain (e.g., johnsmith@winlaw.com)

This is a metadata field of any folder from where a document was saved (such as computer or network drive)

Example: folderpath("Deleted items") — All documents that were in the "Deleted Items" folder when collected (note: this search locates any discrete folder within the tree of folders and subfolders (e.g., MyComputer/Files/DeleteItems)

Metadata field identifying the sender of an email

Example: from(Lee) — All emails sent by "Lee"

Metadata field searching the subject (or "re" line) of an email.

Example: subject(meeting) — All emails with "meeting" in the subject lines.

Text in DISCO is the OCR (extracted text) information in an image

Example: text(Peter) — Documents containing "Peter" anywhere within the image (note: this does not search metadata)

Metadata field identifying to whom an email was sent (excludes the cc and bcc fields)

Example: to(Duncan) — All emails where "Duncan" (either as a first or last name) was in the "to" field
to("Duncan Kennedy") — All emails sent to "Duncan Kennedy"

Recipient searches the combined email metadata fields to, cc, and bcc (i.e., anyone who was a "recipient" of an email)

Example: recipient(Jones) — All emails where "Jones" appears in the metadata of the to, from, or bcc fields

Searches for exact match against the subject without "Re:" or "Fwd:"

Example: subjectNormalized("Transaction documents") — Searches for the exact subject "Transaction documents" while ignoring "Re:" or "Fwd:"

Returns all "parent" documents that have the specified number of "children" ¹

Example: childcount(2) — All emails or other documents that have two children (such as attachments or embedded files)
childcount(1 to 1000) — All emails or other documents that have between 1 and 1000 children

Returns all emails belonging to "conversations" that contain the number or range of emails specified ²

Example: conversationcount(3) — All emails that contain three emails within the conversations
conversationcount(3 to 15) — All emails that contain between three and fifteen emails within the conversations.

This returns files corresponding to the specified size of the file (in bytes)

Example: filelength(25000) — All documents that are exactly 25,000 bytes
filelength(1 to 100000) — All documents with file sizes between 1 and 100,000 bytes

Filename of any document (note: emails often have filenames, though largely hidden in most applications, so consider excluding that type if desired)

Example: filename(Agenda.pdf) — All documents with the exact filename "agenda.pdf"
filename(Agenda!) — All documents that begin with "Agenda" in the filename (e.g., Agenda.pdf; AgendaForMay11.word; or Agenda for Meeting.ppt)

Returns documents containing the specified number of pages in an image

Example: pagecount(1) — All documents that have one page
pagecount(101 to 3000) — Documents whose image has between 101 and 3000 pages

Returns all documents with the specified number or range of "parents" ¹

Example: parentcount(1) — All "children" (such as attachments or embedded files) that have only one parent
parentcount(0) — Returns only "parents" (i.e., excludes all attachments and embedded files)

Location from which the document was collected

Example: path("My Computer/Deleted Items/!") — Returns all documents that were saved, when collected, in the folder "My Computer/Deleted Items" as well as all documents in subfolders.

Returns documents with specified number or range of characters in the text of an image (includes spaces)

Example: textlength(3000000) — All documents with 300,000 characters in the text

The "type" of a document in DISCO is the file type (e.g., email, word, pdf, audio, excel, video, text, etc.)

Example: type(word) — All files of type "word"
type(email) — All emails

Searches whether "hidden" data is in a file, including comments, revisions, notes, hidden sheets, or very hidden sheets (note: users must specify type)³

Example: hiddentype(revisions) — All documents with hidden revisions

Tag count is useful for figuring out whether a document has been tagged or not

Examples: 

tagcount(2) — Documents with exactly two tags

tagcount(>3) — Documents with more than 3 tags

Language searches for documents with specific languages including English, German, French, Portuguese, Spanish, Chinese, Japanese, Korean, None, or Undetermined. 

Example: language(German) — Documents that include German language

Documents that have an identified language

Example: hasLanguage(yes) — Documents that have a language identified

Documents that have the specified primary language

Example: primaryLanguage(French) — Documents where the greatest portion of content is in the specified language

Tag predictions are useful for finding documents that DISCO predicts are likely or unlikely to receive a specific tag.

Example: prediction("responsive", highly likely) — Documents that are highly likely to be tagged "responsive"

Inclusive search field returns emails with unique content.

Example: IsInclusive(yes) — Filters out emails that are duplicated within inclusive emails. 

Documents that have any tags, folders, notes, fields, or have been reviewed within a stage or produced

Example: hasworkproduct(yes) — Documents that have any work product applied

Searches for documents that have redactions, do not have redactions, or have redactions in a specific location. Value options are yes, no, onDocument, onMetadata, and any metadata fields.

Example: hasredaction(onDocument) % hasredaction(onMetadata) — All documents with a redaction in the document but not in the metadata
hasredaction(to) — All emails with redaction in the metadata field to

Searches for documents that have redaction reasons, do not have redaction reasons, or have redaction reasons in a specific location.

Example: hasredactionreason(author) — All documents with a redaction reason for the metadata field author
hasredactionreason(yes) — All documents that have a redaction reason

Searches for documents that have a redaction, but no corresponding redaction reason. Value options are yes, no, onDocument, onMetadata, and any metadata field.

Example: hadredactionwithoutreason(yes) — All documents with a redaction that does not have a corresponding redaction reason
hasredactionwithoutreason(onMetadata) — All documents with metadata redactions that do not have a corresponding redaction reason