IM Searches

IM (Instant Message) Search is a way to search for content in MS Teams and Slack. This includes direct, group or system messages, but also shared files, posts or reactions.

NOTE
IM Search will only appear in the dropdown Search menu if the case you are working in can access a Teams or Slack location.

How to Perform an IM Search

  • In the Location view, select the Teams or Slack repositories that you want to search.
  • In the Document view, click Search > IM Search. You can perform a search in four tabs: Post, Files, Audit, and Tags.
  •  
  •  
  •  
  • Click Clear to remove any parameters set in a previous search.
  • Enter criteria in any of the fields. Click Search.
    The Search dialog box closes and your results (if any) are displayed.
  • If needed, run another search. Add criteria to the Post, Files, Audit, or Tags tabs to narrow the search.
NOTE
You can run an Advanced Search using the same search criteria by performing an advanced search. To do so, avoid clearing the Search dialog box after running a search.

How to Filter in Slack

In Slack cases, custodians can be organized according to workspaces and channels. A workspace contains the channels, which is a grouping of users collaborating on content sets. You can narrow down your search according to workspaces, channels, and custodians. On the custodian level, you will be able to view the conversations, posts and files shared between members of those workspaces.

Click on the triangle next to a workspace, channel or custodian to expand. Select only the workspaces, channels, custodians, or conversations that you wish to search.

How to Preview IM Search Results

  • Click once on a result in the Results view. You will be able to read the content of a result. The example below shows a Slack post.
  • You can view Properties or Tags by clicking on the tabs.
  • In the Properties tab, you can view the metadata. For more information on IM Metadata collection—see Instant Message Metadata.
  • If the previewed result is part of a conversation, you can view the complete exchange in the Conversation tab. The previewed instant message will be outlined in blue.
  • (Optional) By default, the List Type is set to infinite scrolling. To change the list format, navigate to the List Type drop-down menu in the bottom-left of the Conversation tab and select Pagination.