| Live Search | ||||
|---|---|---|---|---|
|
The Delete FilesThe Collect Files button can be found on your Search Details Summary page in the upper right corner.
CAUTION: The delete command is a destructive process. Files on endpoints will be deleted and can not be undone once the command is sent. Proceed with extreme caution when attempting to perform mass deletion across many endpoints.
Collected files will be copied to a file or preservation share set up by your system administrator.
- Once a search is complete, select the files you wish to collect using the line item (checkbox) selection and then click "Collect Files" on the Search Details Window.
- Add a Group Name and then select "Collect" in the file pop-up message. Select cancel if you do not wish to continue.
Once the "Collect" button has been selected, the system will create a Collection Action card displaying the intended file count as well as a date stamp along with the user who created the action.
The Collection action card will begin with a status of "queued" as endpoints begin checking in and picking up their collection request. The status will move to "Collecting" once file collection has begun. File-level status can be viewed at the far right. If you would like to view files that are queued for collection you may sort on the column by clicking on the column header.
Collected File Information
Files will keep their original file path and will appear in the collected folder in the following manner:
Interrogate Job Name > Interrogate Search Name > Interrogate Machine Name_Endpoint ID > Endpoint File path
Example:
Using Interrogate, I create a Job called Acme Energy with a search called HR Department. The HR Department consists of three employees (Judy Townsend, Pat Lewis, Patricia Turner). When I execute my search (Employee Record Search) I find documents on all three employee's laptops that I want to collect. When I click on the "Collect Files" button my collection will look like the following:
Acme Energy > Employee Record Search > Judy Townsend_126 > C > ...
| Info | ||
|---|---|---|
| ||
Files larger than 100MB must be collected outside of Interrogate. |
| Info | ||
|---|---|---|
| ||
Interrogate collects both loose files as well as files from PST, OST or ZIP. Interrogate does NOT currently support other container types such as RAR at this time. |
| Info | ||
|---|---|---|
| ||
Files identified as deleted will not be collected as they no longer exist on the endpoint. |
You will be provided an FTP link which will act as your collection location. Please see your network administrator or contact Heureka support for more information.
Collect file group name input. Group names will be displayed in the action card.
Action Card showing a "Done" status with no errors
Collect Action card selected showing all files in the intended collection.