Search Quick Reference

Search basics
DISCO uses Westlaw- and Lexis-style search syntax with boolean search operators. Here are the basic search bar commands and
operators.

Command Description Example

&, and Includes results with both terms contract & payment
Documents that contain both contract and payment
[space], or Includes results with either term or contract payment
field Documents that contain contract or payment
%, not Excludes term or field from results contract % payment
Documents that contain contract but do not contain payment
/n Proximity search, searching within contract /10 payment
n words, in any order Documents that contain contract within ten words of payment, where
the order is irrelevant
+n Proximity search, searching within contract +10 payment
n words in prescribed order Documents that contain contract within ten words of payment, where
payment must precede contract
“” Exact phrase intended 1 “contract payment”
Documents that contain the exact phrase contract payment
! Truncation search or root expander; contract!
can be used at the beginning or end Documents that contain any term starting with contract, for example,
of a term contract, contracts, contractual, contracting, or contracted
!contract
Documents that contain any term ending with contract, for example,
subcontract
* Wildcard search for single character contract*
Searches for words that have one, but only one, character after
contract, such as contracts, but not contracted, contractual,
or contract
~ Fuzzy or approximate word search2 guaranty~
Searches for guaranty, guarantee, garanty, and similar (mis)spellings
. Period in a name or email address [email protected]
Documents that contain the period in the email address, but do not
contain [email protected]

1 Word operators (and, or, and not) can be searched if placed in quotation marks, e.g., “contract and payment”

2 Fuzzy searching allows for the addition, deletion, or substitution of up to two letters in a word.
 Search Quick Reference 2

Command Description Example

() Grouping syntax (failure & consideration) & (contract agreement)
Documents must contain both failure and consideration, and must
also contain either contract or agreement
sample(n, search) Returns n documents randomly sample(.5, contract); sample (700, contract)
selected from results of search. If n is Returns 50% and 700 of the search results for contract at random,
less than 1, this number is treated as respectively
a percentage.
field(terms) Field searching (see below custodian(Holcombe)
for standard DISCO fields) Documents with Holcombe in the custodian field

Order of operations
1. Exact phrases: “ ”

2. Groupings: ( )

3. Proximity: /n, +n

4. &, and, %, not

5. [space], or

Standard document fields

Search queries that do not specify a field search document text, document notes, any custom fields, and document metadata
fields, such as custodians, authors, subject, to, from, cc, and bcc. Otherwise, searches can be directed to the following fields:

Command Description Example

batesNumber Field of Bates numbers applied to batesNumber(Enron000009)
documents (either from DISCO pro- A document receiving the Bates stamp Enron000009
duction or from elsewhere)
batesNumber(Enron000007 to Enron000950)
Documents with Bates numbers within the identified range
batesPrefix The English portion of the Bates batesPrefix(Enron)
stamp Documents that use Enron as a Bates prefix
DeDupHash The unique identifier used to dedupli- DeDupHash(ABC123)
cate documents at the time of ingest The document with deduplication hash ABC123
id An identification number assigned by id(1200)
DISCO that is unique to each docu- The document with DISCO identification number 1200
ment in the database
 Search Quick Reference 3

Command Description Example

ingestSessionId A number assigned to each group of ingestSessionId(“IngestSessions/1”)
documents ingested into DISCO Documents ingested into DISCO in Ingest Session 1
production A name assigned by the user to each production(“defense”)
set of documents produced using Documents produced in the defense production set
DISCO
referenceid Optional identification number users referenceid(245)
can assign (contact DISCO support to Document with Reference ID number 245
do so)

User-created information
Command Description Example
documentNote Document note field (edited manually documentNote(hot)
by DISCO users) Documents with the word hot in the document note field
field Custom metadata field added by field(important)
admin-level users that is used to Documents with important in any field
capture additional information
folder Folder created in DISCO by a user folder(“Hot Documents”)
Documents in the Hot Documents DISCO folder
folder(“Hot Documents/Experts”)
Documents in the Experts subfolder
folder(“Hot Documents/!”)
Documents in the Hot Documents folder and all subfolders
privilegeNote A text field that will appear on privi- privilegeNote(“Legal Advice”)
lege logs Documents using the phrase Legal Advice inside the privilege note
redactionReason Optional user-created text than can redactionReason(“Trade Secret”)
overlay redactions Documents with Trade Secret applied as a redaction reason
stage A set of documents created by users stage(“First Pass Review”)
for linear review Documents in the First Pass Review stage
stageBatched Documents in stages that have been stageBatched(“First Pass Review”)
pulled into batches Documents in the First Pass Review stage that have been placed
in batches (whether or not yet reviewed)
stageComplete Documents that have been marked stageComplete(“Privilege Review”)
“reviewed” in a stage Documents in the Privilege Review stage that have been marked
reviewed (i.e., complete)
tag Fields appended to documents by tag(responsive)
users Documents with the responsive tag
 Search Quick Reference 4

Document metadata3 fields

Command Description Example
author Identifies the author or creator of a author(Jones)
file (does not include the sender of Documents that Jones authored
an email)
bcc A recipient that was blind copied (or bcc(Frank)
blind carbon copied) on an email Emails in which Frank (first or last name) is blind copied
cc A recipient that was copied (or car- cc(Thomas)
bon copied) on an email Emails in which Thomas (either as a first or last name) is copied
cc(“Frank Thomas”)
Emails in which Frank Thomas is copied
custodian Typically the individual or location custodian(Peterson)
from which a document was col- Documents that have Peterson in the custodian name field
lected
custodianExact An exact custodian name custodianExact(“Andrew Lewis”)
Documents in which exactly Andrew Lewis is the custodian
domain An email domain (typically, the text domain(winlaw.com)
after the @ symbol) Emails sent to or from email addresses (also including cc and bcc
fields) having winlaw.com as the domain (e.g., johnsmith@winlaw.
com)
folderpath Any folder in which a document folderpath(“Deleted items”)
was saved (such as a computer or Documents that were in the Deleted Items folder when collected
network drive)
Note: This search locates any discrete folder within the tree of
folders and subfolders (e.g., MyComputer/Files/DeleteItems)
from Identifies the sender of an email from(Lee)
Emails sent by Lee
recipient Searches the combined email recipient(Jones)
metadata fields: to, cc, and bcc (i.e., Emails in which Jones appears in the metadata of the to, from, or
anyone who was the recipient of an bcc fields
email)
subject Searches the subject (or “re:” line) of subject(meeting)
an email Emails with meeting in the subject line
subjectNormalized Searches for exact match against the subjectNormalized(“Transaction documents”)
subject without “Re:” or “Fwd:” Searches for the exact subject Transaction documents while ignor-
ing “Re:” or “Fwd:”

3 Metadata is data about a document that is not part of the document’s content. Metadata can include things like the creation date, author, sending and receiving information, file name,
and file path.
 Search Quick Reference 5

Command Description Example

text The OCR (extracted text) information text(Peter)
in an image Documents containing the word Peter anywhere within the image

Note: This does not search metadata

to Identifies to whom an email was sent to(Duncan)
(excludes the cc and bcc fields) Emails in which Duncan (either as a first or last name) was in the to
field
to(“Duncan Kennedy”)
Emails sent to Duncan Kennedy

Document attributes
Command Description Example
billingSize Returns all documents with the billingSize(>1000000)
indicated size in bytes relative to the Documents with a billing size greater than 1,000,000 bytes
review database’s billing statement
childCount Returns all parent documents that childCount(2)
have the specified number of chil- Emails or other documents that have two children (such as attach-
dren4 ments or embedded files)
childCount(1 to 1000)
Emails or other documents that have between 1 and 1000 chil-
dren
comment Returns all documents with the comment(!)
indicted text left inline in the original All documents with comments in the original files
file
company Returns all documents created by the company(Enron)
same company Documents created by Enron
conversationCount Returns all emails belonging to conversationCount(3)
conversations5 that contain the Emails that contain three emails within the conversations
number or range of emails specified
conversationCount(3 to 15)
All emails that contain between three and fifteen emails within the
conversations
extension Returns all documents with the speci- extension(.doc)
fied file extension All documents with the .doc file extension

4 A child is typically either an attachment to an email or an embedded file in a document. A parent is the email containing the attachment or the document containing the file.

5 Conversations include the various responses, replies, and forwards of an email chain.
 Search Quick Reference 6

Command Description Example

fileLength Returns files corresponding to the fileLength(25000)
specified size of the file (in bytes) Documents that are exactly 25,000 bytes
fileLength(> 1000000)
Documents with file sizes greater than 1,000,000 bytes
filename The filename of any document filename(Agenda.pdf)
Documents with the exact filename agenda.pdf
Note: Emails often have filenames,
filename(Agenda!)
though largely hidden in most
Documents that begin with Agenda in the filename (e.g., Agenda.
applications, so consider excluding
pdf; AgendaForMay11.doc; or Agenda for Meeting.ppt)
that type, if desired
hasLanguage Documents that have an identified hasLanguage(yes)
language Documents that have a language identified

hasNative Indicates if the native file was hasNative(yes)

supplied. If an image is supplied, Documents with a native file supplied
DISCO will use that to populate the
native file link. If no native or image
is supplied, DISCO will create a near
native image from the supplied text
and use that to populate the native
link.
hasWorkProduct Documents that have any tags, hasWorkProduct(yes)
folders, notes, fields, or have been Documents that have any work product applied
reviewed within a stage or produced
hasWrongExtension Indicates if the extension of an hasWrongExtension(yes)
ingested item is inconsistent with the Documents ingested as a file type that differs from the indicated
determined type type
hiddenText Hidden text is text that has been set hiddenText(yes)
to be hidden in the original file Documents that have hidden text in their original files
hiddentype Identifies whether hidden data is in hiddentype(revisions)
a file, including comments, revisions, Documents with hidden revisions
notes, hidden sheets, or very hidden
sheets
Note: Users must specify type6
imageSize Returns documents with the indicated imageSize(>1000000)
size in bytes of the document’s Documents whose image size is greater than 1,000,000 bytes
image file

6 Choices include revisions, hidden sheets, very hidden sheets, comments, and notes.
 Search Quick Reference 7

Command Description Example

ingestType Indicates which of the two types ingestType(native)
of data deliveries that can be Documents processed as native files
processed:
Native — Files delivered as they
were maintained during the normal
course of business
Load file — Files (either images only
or images with natives) accompanied
by a load file that supplies
family relationship and metadata
information
invisibleText Invisible text is text that is the same invisibleText(yes)
color as its background Documents that contain invisible text
isDetectedEmail Files identified as emails during isDetectedEmail(yes)
processing based on an examination Documents identified as emails
of the file’s text/OCR
isInclusive Returns emails with unique content isInclusive(yes)
Filters out emails that are duplicated within inclusive emails
isProcessedAsNative Indicates that some aspect of isProcessedAsNative(yes)
processing was unsuccessful. Documents that were processed unsuccessfully
However, DISCO will create a record
in the matter with a link to the native
file.
language Searches for documents with specific language(German)
languages (English, German, French, Documents that include the German language
Portuguese, Spanish, Chinese,
Japanese, Korean, or Undetermined)
pageCount Returns documents containing the pageCount(1)
specified number of pages in an Documents that have one page
image
pageCount(101 to 3000)
Documents whose image has between 101 and 3000 pages
parentCount Returns documents with the specified parentCount(1)
number or range of parents Children (such as attachments or embedded files) that have only
one parent
parentCount(0)
Only parents (i.e., excludes all attachments and embedded files)
path Location from which the document path(“My Computer/Deleted Items/!”)
was collected Documents that were saved, when collected, in the My
Computer/Deleted Items folder, as well as all documents in
subfolders

www.csdisco.com ©2019 CS Disco Inc.

 Search Quick Reference 8

Command Description Example

prediction Tag predictions are useful for finding prediction(“responsive”, highly likely)
documents that DISCO predicts are Documents that are highly likely to be tagged responsive
likely or unlikely to receive a specific
tag
primaryLanguage Returns documents that have the primaryLanguage(French)
specified primary language Documents in which the greatest portion of the content is in
French
processingDetails Returns documents with the specified processingReason(Password protected)
processing reason Documents that were identified as password protected during
processing
processingStatus Returns documents with the processingStatus(Successful)
specified processing outcome Documents that were successfully processed
speakerNote Speaker notes are slide-specific speakerNote(yes)
notes that are hidden from the Documents that include speaker notes
audience, but are visible to the
presenter while editing
tagcount Useful for figuring out whether a tagcount(2)
document has been tagged or not Documents with exactly two tags
tagcount(>3)
Documents with more than three tags
textLength Returns documents with specified textLength(3000000)
number or range of characters in the Documents with 300,000 characters in the text
text of an image (including spaces)
title Returns documents with the specified title(GAS PURCHASE AGREEMENT)
document title Documents whose metadata title is GAS PURCHASE
AGREEMENT
type The type of a document in DISCO is type(word)
the file type (e.g., email, Word, PDF, All Word files
audio, Excel, video, or text)
type(email)
All emails

www.csdisco.com ©2019 CS Disco Inc.

 Search Quick Reference 9

Numeric searches
For the following, you can search for an exact document, a range of documents, or documents greater than or less than the indi-
cated value (for example, id(1234), id(1 to 1234), and id(<1234), respectively).

id batesNumber billingSize childCount

conversationCount fileLength imageSize instanceCount

pageCount parentCount similarCount tagcount

textLength

Tag fields
Tagging decisions can also be searched by dates applied and users applying them, using the following syntaxes.

Syntax Description
tag(by [email protected]) Documents tagged by [email protected]
tag(responsive & by [email protected]) Documents tagged responsive by [email protected]
tag(non-responsive % by [email protected]) Documents tagged non-responsive by someone other than
[email protected]
sample(10, tag(by [email protected])) Ten random documents tagged by [email protected]
tag(by [email protected] & on 10/16/2015) Documents tagged by [email protected] on 10/16/2015
tag(responsive & by [email protected] Documents tagged responsive by [email protected]
& before 10/16/2015) before 10/16/2015
removedTag(responsive) Documents from which the responsive tag was removed (by
anyone)
removedTag(by [email protected]) Documents from which any tags were removed by reviewer@
lawfirm.com
* % tag(!) Documents that have zero tags associated

www.csdisco.com ©2019 CS Disco Inc.

 Search Quick Reference 10

Tag prediction
Tag prediction uses AI to predict a tag or tags that should be applied to a document. Tag prediction search syntax is displayed
below. Search syntax can accommodate multiple tags, e.g., prediction(“tag name1” & “tag name2”, >20).

Syntax Description
prediction(“tag name”, Likeliness value) prediction(Attorney-Client, Highly likely)
Documents that are highly likely to be tagged Attorney-Client
prediction(Attorney-Client, Likely)
Documents that are likely to be tagged Attorney-Client
prediction(Attorney-Client, Neutral)
Documents that are neither likely nor unlikely to be tagged
Attorney-Client
prediction(Attorney-Client, Unlikely)
Documents that are unlikely to be tagged Attorney-Client
prediction(Attorney-Client, Highly unlikely)
Documents that are highly unlikely to be tagged Attorney-Client
prediction(“tag name”, score range) prediction(Attorney-Client, -20 to 20)
Documents that have a likelihood score in the range of -20 to
20 to be tagged Attorney-Client
prediction(Attorney-Client, >20)
Documents that have a likelihood score over 20 to be tagged
Attorney-Client
prediction(“tag name”, exact score) prediction(Attorney-Client, 20)
Documents that have a likelihood score of 20 to be tagged
Attorney-Client

Date fields
Dates can be searched by exact date, a range of dates, and before or after a date (for example, createDate(5/4/09), create-
Date(5/4/09 to 5/10/09), and createDate(before 5/10/09), respectively).

Dates can be formatted as date certain (12/10/2015), month and year (9/2016), or year (2012).

allDates( ) conversationdate( )7 createDate( ) date( ) 8

familydate( )9 lastaccesseddate( ) lastmodifieddate( ) lastprinteddate( )
loaddate( ) receiveddate( ) sendDate( )

7 For all documents in an email conversation, the conversation date is the send date of the first email in the conversation. Emails have a sent date, but other document types do not.

8 date( ) refers to the sent date for emails, or the last modified date for other files.

9 For all documents in a family, the family date is the send date of the head of the family.

www.csdisco.com ©2019 CS Disco Inc.

 Search Quick Reference 11

Yes/no fields
Syntax Description
has”Contract Date”(yes|no) yes if document has a contract date
hasDetectedSlipsheet(yes|no) yes if a slipsheet was produced in conjunction with a native
file for load file ingest
hasDocumentNote(yes|no) yes if document has a note
hasFields(yes|no) yes if document has contents in any custom fields
hasHiddenType(yes|no) yes if document has a hidden file type
hasImage(yes|no) yes if document was processed as an image
hasLanguage(yes|no) yes if document has an identified language
hasNative(yes|no) yes if document was processed with a native file
hasOCR(yes|no) yes if the extracted text was derived via OCR
hasPrivilege(yes|no) yes if document has at least one privilege tag
hasRedaction(yes|no|onDocument|onMetadata) yes if document is marked for redaction in DISCO
hasRedactionReason(yes|no|onDocument|onMetadata) yes if document has a reason for redaction
hasRedactionWithoutReason(yes|no|onDocument|onMetadata) yes if document is redacted without a stated reason
hasSearchText(yes|no) yes if document contains searchable text
hasWorkProduct(yes|no) yes if document has work product applied
hasWrongExtension(yes|no) yes if document was processed with a different extension
than the one indicated
isDetectedEmail(yes|no) yes if document was identified as an email
isInclusive(yes|no) yes if document is an email that is duplicated within an
inclusive email
isProcessedAsNative(yes|no) yes if document was processed unsuccessfully
unfoldered(yes|no) yes if document is not in a DISCO folder
 Search Quick Reference 12

Redactions
Command Description Example
hasRedaction Searches for documents that have hasRedaction(onDocument) % hasRedaction(onMetadata)
redactions, do not have redactions, Documents with a redaction in the document but not in the
or have redactions in a specific metadata
location. Value options are yes, no,
hasRedaction(to)
onDocument, onMetadata, and any
Emails with redaction in the to metadata field
metadata fields.
hasRedactionReason Searches for documents that have hasRedactionReason(author)
redaction reasons, do not have Documents with a redaction reason for the author metadata field
redaction reasons, or have redaction
hasRedactionReason(yes)
reasons in a specific location
Documents that have a redaction reason
hasRedactionWith- Searches for documents that have hasRedactionWithoutReason(yes)
outReason a redaction, but no corresponding Documents with a redaction that does not have a corresponding
redaction reason. Value options redaction reason
are yes, no, onDocument, onMeta-
hasRedactionWithoutReason(onMetadata)
data, and any metadata field.
Documents with metadata redactions that do not have a corre-
sponding redaction reason

Custom fields
DISCO also allows administrators to define their own fields that can then be used in DISCO searches. Fields also support wildcards
and true/false syntax.

Example Description
deposition(important) Documents with the word important in the Deposition field
“My thoughts”(“very important”) Documents with very important in the My Thoughts field
or My_thoughts(“very important”)
hasDeposition(!) Documents with any contents in the Deposition field
or hasDeposition(true)
has”PSL Notes”(!) Documents with any contents in the PSL Notes field
or has”psl notes”(true)