Common Search Scenarios in Onna

Description

Syntax

Tips

Personal Messages (1 to 1) conversations

@{user email} AND @{user email} AND conversation-type:im

Combination of identity searching and conversation type. Note, you also have the ability to use filters instead of conversation-type.

Specific Channel ID resources where three custodians had conversations with specific key terms

(@{user email} AND @{user email} AND @{user email}) AND (conversation-id:ChannelID OR conversation-id:Channel ID OR conversation-id:Channel ID) AND (extracted-text:“Search Term” OR extracted-text:“Search Term” OR extracted-text:“Search Term”)

Combination of identity searching, conversation ID, and keywords. Note, you can also use keyword searching without the extracted-text syntax if you want to include all text fields.

Resources where custodians had Group Direct messages (Multi-party message) conversations

@{user email} AND @{user email} AND @{user email} AND conversation-type:dms

Type of conversation in origin - categorizes the type of conversation.

For Slack this includes channels, groups (private channels), or DMs (direct messages). For Teams, channels or chat.

Other examples: im, dms, mpim, groups, channels, chats (teams)

DMs and multi-party messages for one individual for the last 30 days

@{user email} AND conversation-type:[mpim,dms] AND created-after:{31 days ago} AND created-before:{tomorrows date}

Channels = Personal Messages (DMs) and Direct Messages (MPIM)

Participant = Username

Creation Date = Last 30 Days (combine after and before)

How to use identity search to include all resources for two custodians

@{user email} AND @{user email}

This includes all channels and conversations where the users are both active and a member.

Run a proximity search and wildcard search across all DM’s, MPIM’s, Public and Private Channels.

conversation-type:* AND (near:{word 1},2,{word 2} OR near:{word 2},2,{word 1})

Proximity searches the order matters, so if you need to search proximity both ways include it in both order

Search for all conversations between two custodians with a specified date range

@{user email} AND @{user email} AND created-after:{mm/dd/yyyy} AND created-before:{mm/dd/yyyy}

There are a number of different date fields, make sure to include the specific date field you are looking for.

Search for all messages that have edits or deletions

has:editions OR has:deletions

The 'has' functionality has a number of fields available, review the search builder functionality to see the full list.

Search for Public and Private channels

conversation-type:[groups,channels]

Groups are all private channels and Channels are all public channels.