1. Help Center
  2. Rewind Backups for Microsoft 365

Advanced Search

How do I use Advanced Search features like Elasticsearch, Wildcards, and Regular Expression Search (RegEx)?

Rewind Backups supports a number of advanced search options and queries, including:

  • Elasticsearch
  • Wildcard Search
  • Regular Expression (RegEx) Search

Elasticsearch

In addition to expanded search and sort options, Rewind Backups supports Elasticsearch.

In Elasticsearch, when a string is analyzed it gets tokenized by white space and certain special characters. For example, if an email subject line was “The big red ball”, Elasticsearch mapping would index it in two ways:

  • The analyzed version would index this as [“the”, “big”, “red”, “ball”]
  • The non-analyzed version would index this as “The big red ball”

Elasticsearch will analyze the query string and then do a check to see if any of the query terms match any of the field terms. So a “match” query where the query is “big ball” will actually tokenize the query into [“big”, “ball”] then go and look at the analyzed version and try to find a term that matches. It would successfully return “The big red ball” because both “big” and “ball” match the query.

Elasticsearch is helpful for finding all items related to a single, broad topic. 

Wildcard Search

Rewind Backups also supports wildcard characters. These are a simplified version of Regular Expression Search and include two characters: the asterisk (*) and the question mark (?).

Wildcard: Asterisk (*)

  • Description: Matches any character sequence after the *
  • Use: When you know only the beginning of what you are searching for or know that the first few letters are all you would need to enter to find the data.
  • Example: If you are not sure if the name you are looking for is Matt or Matthew, you could search for Matt* which would return both Matt and Matthew. However, it would also return any data including other words starting with Matt.

Wildcard: Question Mark (?)

  • Description: Matches any single character.
  • Use: When you aren’t sure of a letter or multiple letters in a word or phrase.
  • Example: If you are not sure whether the person you are looking for is Kristen Jensen, Kristin Jensen, Kristen Jenson, or Kristin Jenson, you could search for Krist?n Jens?n.

Regular Expression (RegEx) Search

Rewind Backups supports Regular Expression (RegEx). This is a sequence of characters that define a search pattern, mainly for use in pattern matching with strings, or string matching. The examples below are the most common. For more information and RegEx characters, see Regular Expressions.

To perform a Regular Expression search in Exchange or OneDrive for Business, enter "RegEx:" before your query (e.g. RegEx:gr.y).

To perform a Regular Expression search in SharePoint, be sure to check the Regular Expression checkbox on the Advanced Search screen.

RegEx Character: Period (.)

  • Definition: Matches any single character (similar to a Question Mark in Wildcard search).
  • Use: When you aren’t sure of a letter or multiple letters in a word or phrase.
  • Example: If you are searching for the word that could be spelled “grey” or “gray”, you can search for both spellings by searching for “gr.y”.

RegExp Character: Plus Sign (+)

  • Definition: Matches any number of the preceding character.
  • Use: When you aren’t sure how many repeated letters were used.
  • Example: If you don’t remember how many o’s you used when you described something that was really gooood. You can search for any number of o’s by searching for “go+d”.

RegExp Character: Pipe Symbol (|)

  • Definition: Acts as an “or” operator.
  • Use: When you want to query more than one word or phrase.
  • Example: If you aren’t sure if the subject line of an email was Team Collaboration Kickoff or Kickoff for Team Collaboration and you don’t want to return every email that includes any of those individual words, you can search for both possibilities by searching for “Team Collaboration Kickoff”|”Kickoff for Team Collaboration".