Advanced Query Language Fields
Field | Description | Type | Example |
altrecipients |
Alternative recipients listed in the To field or Cc field of the envelope journal report. Note that this search field is only applicable to envelope journaled messages. |
String |
|
attachedfiles |
A filename (If filename contains spaces, enclose in quotes) Filenames joined by Boolean expressions (If filename contains spaces, enclose in quotes) To match an ordered list of attachments use a semicolon separated list of all filenames, enclosed in quotes (No need to add extra quotes to filenames with spaces) |
String |
|
content |
The content of the message. |
String |
|
dlists |
Distribution lists listed in the To field or Cc field of the envelope journal report. Note that this search field is only applicable to envelope journaled messages. |
String |
|
emaildate |
The date specified in the Sent Date field of the message header. To search by date only, use the form To search by date and time, use the form
Use 24-hour clock when specifying time. Use Use < or > to specify dates before or after a certain date. Note: By default, |
Date |
To find messages sent between January 1, 2018, midnight (local) and January 3, 2019, midnight (local): |
envrecipients |
The recipient information contained in the message envelope. Note that the message envelope refers to the wrapper that contains the message's delivery directives.
NOTE: Only email addresses found in retention policies can be found using Bcc. It will not find any email addresses that are external to your organization or not included in a retention policy. |
String |
|
envsender |
The sender information contained in the message envelope. Note that the message envelope refers to the wrapper that contains the message's delivery directives. |
String |
|
filename |
The file name of a document or message. When searching for an attachment, also set To search for a message, set |
String |
|
isattachment |
An indicator of whether the document is an email attachment or a message. To indicate that the document is an attachment, set To indicate that the document is not an attachment, set |
Integer |
|
mailbcc |
Recipients listed in the Bcc field of the envelope journal report. Note that this search field is only applicable to envelope journaled messages. |
String |
|
mailbccaltrecipient |
Alternative recipients listed in the Bcc field of the envelope journal report. Note that this search field is only applicable to envelope journaled messages. |
String |
|
mailbccdlist |
Distribution lists listed in the Bcc field of the envelope journal report. Note that this search field is only applicable to envelope journaled messages. |
String |
|
mailcc |
The recipients listed in the Cc field of the message header. |
String |
|
mailccaltrecipient |
Alternative recipients listed in the Cc field of the envelope journal report. Note that this search field is only applicable to envelope journaled messages. |
String |
|
mailccdlist |
Distribution lists listed in the Cc field of the envelope journal report. Note that this search field is only applicable to envelope journaled messages. |
String |
|
mailfrom |
The sender listed in the From field of the message header. |
String |
|
mailsubject |
The subject of the message. If value contains spaces, enclose in double-quotes. |
String |
|
mailto |
The recipients listed in the To field of the message header. |
String |
|
mailtoaltrecipient |
Alternative recipients listed in the To field of the envelope journal report. Note that this search field is only applicable to envelope journaled messages. |
String |
|
mailtodlist |
Distribution lists recipients listed in the To field of the envelope journal report. Note that this search field is only applicable to envelope journaled messages. |
String |
|
receiveddate |
The date the message was received by the email server. To search by date only, use the form To search by date and time, use the form
Use 24-hour clock when specifying time. Use Note: By default, |
Date |
To find all messages received on or after February 3, 2018, use To find all messages received before February 3, 2018, use |
recipients |
The recipients listed in one or more of the following:
|
String |
|
senders |
The list of senders in the message envelope or the From field of the message header. Note that the message envelope refers to the wrapper that contains the message's delivery directives. |
String |
|
size |
The size of document (message or attachment) in bytes. Express sizes in bytes. For example, 4 KB as |
Integer |
To find all messages (messages only, without attachments) with a total size of at least 4KB but no greater than 8KB, use |
totalsize |
The size of the message, in bytes, including all attachments. Express sizes in bytes. For example, 4 KB as Or use < or > to specify sizes greater or less than a certain size. |
Integer |
To find all messages with a total size (messages and attachments) of at least 8KB or greater, use |
undisclosedrecipients |
Undisclosed recipients listed in one or more of the following:
Note that this search field is only applicable to envelope journaled messages. |
String |
|