

Indicates whether messages have been read. Messages that are marked as high importance, medium importance, or low importance.

By default, messages are sent with normal importance, unless the sender sets the importance as high or low. The importance of an email message, which a sender can specify when sending a message. Messages sent by the specified user that have attachments. Use the values true or AND hasattachment:true Indicates whether a message has an attachment. sent by the specified user or sent from a specified domain. The second example returns all items in the specified mailbox folder that were sent or received by sender of an email message. To search subfolders, you need to use the Folderid property for the subfolder you want to search.įor more information about searching for the Folderid property and using a script to obtain the folder IDs for a specific mailbox, see Use Content search for targeted collections.įolderid:4D6DD7F943C29041A65787E30F02AD1F00000000013A0000įolderid:2370FB455F82FC44BE31397F47B632A70000000001160000 AND first example returns all items in the specified mailbox folder. Any subfolders in the folder won't be searched. Only the specified folder will be searched. If you use this property, be sure to search the mailbox that the specified folder is located in. The folder ID (GUID) of a specific mailbox folder. In both examples, messages with Pilar Pinilla specified in the Cc field. Messages that have been assigned the red category in the source mailboxes. Categories can be defined by users by using Outlook or Outlook on the web (formerly known as Outlook Web App). Pinilla"Īll examples return messages with Pilar Pinilla included in the Bcc field. In the second example, using the wildcard character ( * ) returns messages with the word "annual" in the file name of an attachment. Messages that have an attached file named annualreport.ppt. The names of files attached to an email message. This also applies when searching site and contact properties. For example, using the property:value pair of subject:"" to search for email messages with an empty subject line will return zero results. When searching email properties, it's not possible to search for items in which the specified property is empty or blank.
#Boolean search language how to#
Searching for site content that's shared with users outside of your organizationįor step-by-step instructions on how to create different eDiscovery searches, see:.Searching for sensitive data types and custom sensitive data types in SharePoint and OneDrive for Business.Using Boolean search operators, search conditions, and other search query techniques to refine your search results.You can also use the *-ComplianceSearch cmdlets in Security & Compliance PowerShell to search for these properties. This includes Content search, Microsoft Purview eDiscovery (Standard), and Microsoft Purview eDiscovery (Premium) (eDiscovery searches in eDiscovery (Premium) are called collections). This article describes the email and document properties that you can search for in email items and Microsoft Teams chat conversations in Exchange Online, and documents stored on SharePoint and OneDrive for Business sites using the eDiscovery search tools in the Microsoft Purview compliance portal.
