DISCO search manual

Includes results with both terms

Example: contract & payment — Documents that contain both contract and payment

Includes results with either term or field

Example: contract payment — Documents that contain contract or payment

Excludes term or field from results

Example: contract % payment — Documents that contain contract but do not contain payment

Proximity search, searching within n words

Example: contract /10 payment — Documents that contain contract within ten words of payment where payment could precede contract

Proximity search, searching within n words in prescribed order

Example: contract +10 payment — Documents that contain contract within ten words of payment where contract must precede payment

Exact phrase intended¹

Example: “contract payment” — Documents that contain the exact phrase contract payment

Truncation search or root expander

Example: contract! — Documents that contain any term starting with contract, for example, contract, contracts, contractual, contracting, or contracted

Wildcard search for single character

Example: contract* — Searches for words that have one, but only one, character after contract, such as contracts, but not contracted, contractual, or contract

Fuzzy or approximate word search

Example: guaranty~ — Searches for guaranty, guarantee, garantee, garanty, and similar (mis)spellings

Hyphen in search term

Example: Sub-zone — Documents that contain Sub-zone or Sub zone

Period in a name or email address

Example: Matt.Motley@email.com — Documents that contain the period in the email address, but do not contain MattMotley@email.com

Grouping syntax

Example: (failure & consideration) & (contract agreement) — Documents must contain both failure and consideration and must also contain either contract or agreement

Returns n documents randomly selected from results of search. If n is less than 1, this number is treated as a percentage.

Example: sample(.5, contract) — Returns 50% of the search results for contract at random.

sample(700, contract) — Returns 700 randomly selected documents from the search results for contract.

Field searching (see below for standard DISCO fields)

Example: custodian(Holcombe) — Documents with Holcombe in the custodian field

Field of Bates numbers applied to documents (either from DISCO production or from elsewhere)

Examples: batesnumber(Enron000009) — A document receiving the Bates stamp Enron000009

batesnumber(Enron000007 to Enron000950) — Documents with Bates numbers within the identified range

English portion of the Bates stamp

Example: batesprefix(Enron) — Documents that use Enron as a Bates prefix

The unique identifier used to deduplicate documents at the time of ingest
Example: eDeDupHash(ABC123) — The document with deduplication hash ABC123

Identification number assigned by DISCO that is unique to each document in the database

Example: id(1200) — The document with DISCO identification number 1200

Number assigned to each group of documents ingested into DISCO

Example: ingestsessionid("IngestSessions/1") — Documents ingested into DISCO in Ingest Session 1

Name or number assigned to each set of documents produced using DISCO

Examples: production("defense") — Documents produced in the defense production set

production(productions/2) — Documents produced in the second production set

Optional identification number users can assign (contact DISCO Support to do so)

Example: referenceid(245) — Document with Reference ID number 245

The document note field is appended to documents manually by DISCO users and fully searchable after creation

Example: documentnote(hot) — Documents with hot in the document note field

Custom metadata field added by admin-level users that is used to capture additional information

Examples: fields(important) — Documents with important in any field

more about custom fields

Folder created in DISCO by a user

Examples: folder("Hot Documents") — Documents in the Hot Documents DISCO folder

folder("Hot Documents/Experts") — Documents in the Experts subfolder

folder("Hot Documents/!") — Documents in the Hot Documents folder and all subfolders

A user-created field that will appear on privilege logs (such as a reason for the privilege assertion)

Example: privilegenote("Legal Advice") — Documents using the phrase "Legal Advice" inside the privilege note

Optional user-created text that can overlay redactions when produced

Example: redactionreason("Trade Secret") — Documents with "Trade Secret" applied as a redaction reason

A set of documents created by users for linear review

Example: stage("First Pass Review") — Documents in the First Pass Review stage

Documents in stages are pulled by a reviewer in batches

Example: stagebatched("First Pass Review") — Documents in the First Pass Review stage that have been placed in batches (whether or not yet reviewed)

After documents are marked "reviewed" in a stage, they are complete

Example: stagecomplete("First Pass Review") — Documents in the First Pass Review stage that have been marked reviewed (i.e., complete)

Tags are user-added fields appended to documents by users

Example: tag(responsive) — Documents with the responsive tag

Identifies the author or creator of a file (does not include the sender of an email)

Example: author(Jones) — Documents that Jones authored

A recipient that was blind copied (or blind carbon copied) on an email

Example: bcc(Frank) — Emails in which Frank (first or last name) is blind copied

A recipient that was copied (or carbon copied) on an email

Examples: cc(Thomas) — Emails in which Thomas (either as a first or last name) is copied

cc("Frank Thomas") — Emails in which Frank Thomas is copied

Typically the individual or location from which a document was collected

Example: custodian(Peterson) — Documents that have Peterson in the custodian name field

An exact custodian name

Example: custodianexact("Andrew Lewis") — Documents in which exactly Andrew Lewis is the custodian

An email domain

Example: domain(winlaw.com) — Emails sent to or from email addresses (also including cc and bcc fields) having winlaw.com as the domain (e.g., johnsmith@winlaw.com)

Any folder in which a document was saved (such as a computer or network drive)

Example: folderpath("Deleted items") — Documents that were in the Deleted Items folder when collected

Note: This search locates any discrete folder within the tree of folders and subfolders (e.g., MyComputer/Files/DeleteItems

Metadata field identifying the sender of an email

Example: from(Lee) — Emails sent by Lee

Searches the combined email metadata fields: to, cc, and bcc (i.e., anyone who was the recipient of an email)

Example: recipient(Jones) — Emails in which Jones appears in the metadata of the to, from, or bcc fields

Searches the subject (or "re:" line) of an email.

Example: subject(meeting) — Emails with meeting in the subject line

Searches for exact match against the subject without "Re:" or "Fwd:"

Example: subjectNormalized("Transaction documents") — Searches for the exact subject "Transaction documents" while ignoring "Re:" or "Fwd:"

Text in DISCO is the OCR (extracted text) information in an image

Example: text(Peter) — Documents containing Peter anywhere within the image

Note: This does not search metadata

Identifies to whom an email was sent (excludes the cc and bcc fields)

Example: to(Duncan) — Emails in which Duncan (either as a first or last name) was in the to field
to("Duncan Kennedy") — Emails sent to Duncan Kennedy

Returns all parent documents that have the specified number of children ²

Example: childcount(2) — Emails or other documents that have two children (such as attachments or embedded files)
childcount(1 to 1000) — Emails or other documents that have between 1 and 1000 children

Returns all emails belonging to conversations that contain the number or range of emails specified ³

Example: conversationcount(3) — Emails that contain three emails within the conversations
conversationcount(3 to 15) — Emails that contain between three and fifteen emails within the conversations.

Returns files corresponding to the specified size of the file (in bytes)

Example: filelength(25000) — Documents that are exactly 25,000 bytes
filelength(1 to 100000) — Documents with file sizes between 1 and 100,000 bytes

The filename of any document

Note: Emails often have filenames, though largely hidden in most applications, so consider excluding that type, if desired

Example: filename(Agenda.pdf) — Documents with the exact filename agenda.pdf
filename(Agenda!) — Documents that begin with Agenda in the filename (e.g., Agenda.pdf; AgendaForMay11.doc; or Agenda for Meeting.ppt)

Documents that have an identified language

Example: hasLanguage(yes) — Documents that have a language identified

Documents that have any tags, folders, notes, fields, or have been reviewed within a stage or produced

Example: hasworkproduct(yes) — Documents that have any work product applied

Identifies whether hidden data is in a file, including comments, revisions, notes, hidden sheets, or very hidden sheets

Note: Users must specify type⁴

Example: hiddentype(revisions) — Documents with hidden revisions

Inclusive search field returns emails with unique content

Example: IsInclusive(yes) — Filters out emails that are duplicated within inclusive emails

Searches for documents with specific languages (English, German, French, Portuguese, Spanish, Chinese, Japanese, Korean, or Undetermined)

Example: language(German) — Documents that include the German language

Returns documents containing the specified number of pages in an image

Example: pagecount(1) — Documents that have one page
pagecount(101 to 3000) — Documents whose image has between 101 and 3000 pages

Returns documents with the specified number or range of parents²

Example: parentcount(1) — Children (such as attachments or embedded files) that have only one parent
parentcount(0) — Only parents (i.e., excludes all attachments and embedded files)

Location from which the document was collected

Example: path("My Computer/Deleted Items/!") — Documents that were saved, when collected, in the My Computer/Deleted Items folder, as well as all documents in subfolders

Tag predictions are useful for finding documents that DISCO predicts are likely or unlikely to receive a specific tag

Example: prediction("responsive", highly likely) — Documents that are highly likely to be tagged responsive

Documents that have the specified primary language

Example: primaryLanguage(French) — Documents in which the greatest portion of the content is in French

Useful for figuring out whether a document has been tagged or not

Example: tagcount(2) — Documents with exactly two tags

tagcount(>3) — Documents with more than three tags

Returns documents with specified number or range of characters in the text of an image (including spaces)

Example: textlength(3000000) — Documents with 300,000 characters in the text

The type of a document in DISCO is the file type (e.g., email, Word, PDF, audio, Excel, video, or text)

Example: type(word) — All Word files
type(email) — All emails

prediction(Attorney-Client, Highly likely)

prediction(Attorney-Client, Likely)

prediction(Attorney-Client, Neutral)

prediction(Attorney-Client, Unlikely)

prediction(Attorney-Client, Highly unlikely)

prediction(Attorney-Client, 20 to -20)

prediction(Attorney-Client, > 20)

prediction(Attorney-Client, 20)

Searches for documents that have redactions, do not have redactions, or have redactions in a specific location. Value options are yes, no, onDocument, onMetadata, and any metadata fields.

Example: hasredaction(onDocument) % hasredaction(onMetadata) — Documents with a redaction in the document but not in the metadata
hasredaction(to) — Emails with redaction in the to metadata field

Searches for documents that have redaction reasons, do not have redaction reasons, or have redaction reasons in a specific location.

Example: hasredactionreason(author) — Documents with a redaction reason for the author metadata field
hasredactionreason(yes) — Documents that have a redaction reason

Searches for documents that have a redaction, but no corresponding redaction reason. Value options are yes, no, onDocument, onMetadata, and any metadata field.

Example: hadredactionwithoutreason(yes) — Documents with a redaction that does not have a corresponding redaction reason
hasredactionwithoutreason(onMetadata) — Documents with metadata redactions that do not have a corresponding redaction reason