バックアップファイルの検索方法

Overview

Using the Enterprise Search capability, inSync administrators can quickly find end-user files that are backed up by inSync. You can search files by file name or checksums.

Following is a list of metadata attributes that inSync indexes for files:

• File name
• File SHA1 hash

Search files by filename

Procedure

1. On the inSync Management Console menu bar, click Governance > Enterprise Search.
2. Enter a part or the entire filename of the file in search box. 
   Use the filters and search operators available for file search to narrow down your search results. Start typing a filter value in a filter and inSync will auto-suggest the values that match your string.

   If you have not selected the Match exact words filter, then all words in the search query should at least contain 3 characters. For example, "qu" or "quarterly re" are invalid search queries where as "qua" or "quarterly rep" are valid search queries.

   The filters available for file search are described in the table below. 

   Filter Name	Description
   File Type	Specify a particular file type that you want to search. The file type should be in the following format: .<file type> For example, if you want to search PDF files, specify .PDF.
   File Modified Between	Specify a date range to list files modified between the selected dates. For example, when you enter 3 March in the From field and 8 April in the To field, inSync searches files modified between 3 March, 12:00 am to 8 April 11:59 pm.
   File Size Between	Specify the file size limit to filter files that fall in the desired size limit. File size can be specified in KBs, MBs, and GBs.
   Data Source	Specify a particular data source where you want to search files.
   Profiles	Specify a profile to search files created by users associated to a particular profile.
   Users	Specify a user to search files created by a particular user.
   Match exact words	Select this check box if you want inSync to match the exact words of your query. For example, if your search query contains 2 characters, select this check box.

3. Click the Search icon. 
   inSync displays a list of files that match your search criteria. 

Search files using checksums

inSync allows you to search for files using SHA1 checksums. Checksums can be generated using command line or third-party tools.

For Linux OS, use the following command to generate SHA1 checksum:

sha1sum /<path_to_file>/filename

For Mac OS, use the following command to generate SHA1 checksum:

shasum /<path_to_file>/filename

For Windows OS, you can generate SHA1 checksums by using third-party tools such as the Microsoft File Checksum Integrity Verifier. Refer the documentation of the third party tool you are using for more information on how to generate checksum for a file in Windows OS.

inSync also displays the SHA1 checksum of a file in the search results. 

To view the SHA1 checksum of a file

• In the search results, click the number in the Versions column. In the Versions dialog box, the version(s) of the file is displayed along with the SHA1 hash value. 
  

Procedure

To search for files using checksums

1. On the inSync Management Console menu bar, click Governance > Enterprise Search.
2. Enter the checksum of the file that you want to search in the search box in the following format:
   checksum:<SHA1>
   
3. Click the Search icon.
   inSync displays a list of files that match your search criteria.

Download Files

You can download all the files (and any version of a file) that are displayed in the search results for offline review or to ingest the files into a third party tool and scan the files for review and analysis. 

To download files

1. Search for the files that you want to download.
2. Select the files that you want to download and click Download File.

Latest version of all the selected files are downloaded in a compressed file format. Following is the file naming convention of the downloaded file:

SearchResults-<Date stamp>, <Time stamp>.<file extension of the compressed file format>

To download a particular version of a file

1. Search for the file.
2. Click the number in the Versions column of that file. The Versions dialog box opens and all the file versions are displayed with the latest version at the top of the list.
3. Select the versions that you want to download and click Download. Selected versions of the files are downloaded in a compressed file format.

Delete Files

If you become aware of any malicious or sensitive file in your organization, you can use the Enterprise Search capability to find such files and then delete those files from data source or from both, data source and snapshot. Deletion is useful when you want to prevent exposure of a sensitive file and remove all its occurrences from the data source and storage.

Note: Deletion is not available for non-compliant emails and for Cloud Apps.

Procedure

1. Search for files by filename or checksum.
2. Select the files that you want to delete.
3. Click Delete File. You can choose to delete the files only from data source or from both data source and snapshot. 
   
4. Click Delete Files again in the confirmation message. 

 You cannot undo a file delete action. You also cannot delete a specific version of a file. inSync by default deletes all the versions of the selected file.

In case inSync is unable to delete the selected files, inSync creates an entry in the admin audit trail listing why it was unable to delete the file. inSync creates separate audit trail entries for failure to delete from snapshot and failure to delete from data source. 

Email Search Results

The search results show a maximum of 1000 results that match your search query. inSync displays the search results progressively; loading the search results while scrolling. Using the Email Result option, up to 20,000 search results in CSV format can be sent to the email address of the inSync Administrator who is logged in.

Procedure

1. Search for files by filename or checksum.
2. Click Email Result. The search results are emailed to you in CSV format.
   

The fields in the CSV file are explained in the following table.

Filter Name	Description
Time when searched	Displays the date and time stamp when the search query was run.
Query	Displays the search query that was entered.
Exact Match, Dates, Types, Files Size, Users, Device Platforms	Each filter is represented in a separate line and it displays the value that you used for each filter. If you have not applied a particular filter then, it displays Not Applied beside that filter name. If you have applied a filter, then the value of the filter is displayed beside the filter name.
Matches	Displays a numeric value of the number of search results that matched your search query.
Filepath	Displays the path where the file is located.
Modification Time	Displays the time when the file was last modified.
Filename	Displays the name of the file that match your search result.
Size	Displays the file size.
User ID	Displays the unique ID for the user.
User Name	Displays the name of the user that is associated with the User ID.
Device ID	Displays the unique ID of the device.
Device Name	Displays the name of the device where the file is stored.