Search History enables an increase to the speed and performance of Spirion's searching by skipping any files and e-mails already searched which have not been modified since whenever no matches were found or no new AnyFind Data Types have been enabled.
The first time a search is run after selecting this checkbox (selected by default), a search history database is created with information about all of the files that Spirion searches including the AnyFind Data Types used to search those files along with the date/time modified. Each additional time a search is run with Search History enabled, Spirion will skip all files and e-mails that have not changed since the previous search as long as they did not contain any Data Matches or new AnyFind Data Types were not enabled. Files and e-mails found to contain Data Matches during a search are searched again during subsequent searches unless they are specifically added to the Ignore List.
When a location is not searched because of Search History then a message will appear in the search log stating that the location was skipped due to user configuration.
When using the Searching All Locations for Passwords Found in Browsers setting and new items are added to your web browsers, your unchanged files and e-mails will not be searched for this new information unless the Search History databases of the endpoint are deleted.
Deleting Search History Database from the client
Deleting the Search History of an endpoint from the Spirion console
When enabled, the Searching Only Files and E-Mails Created or Modified Since a User Specified Date setting prevents Spirion from searching any files and e-mails that have not changed since the date specified. This feature enables you to increase the speed and performance of Spirion's search and is especially useful if you recently ran Spirion but did not have the Use Search History for Files and E-Mails setting enabled and only wish to search files and e-mails modified since that previous search.
Search History is enabled by default. Search History will not search any file that was searched previously in the same context (System or Logged on User) as long as the file had not been changed and the enabled Data Types searched for had not changed. You can verify that the Search History database files are being written by verifying that the files exist in the following locations:
Search History for searches run in the System Context are in the following folder:
XP/2003: %ALLUSERSPROFILE%\Application Data\Identity Finder\databases
Vista and above: C:\ProgramData\Identity Finder\Profiles\System\databases
Search History for searches run in the Local Logged on User Context are in the following folder:
XP/2003: %userprofile%\Local Settings\Application Data\Identity Finder\databases
Vista and above: %localappdata%\Identity Finder\databases
The SH (Search History) files are named as follows:
idfmtf.db file SH
idfmtn.db lotus notes email SH
idfmto.db outlook email SH
idfmtt.db thunderbird email SH
idfmtw.db winmail/outlook express email SH
idfmtx.db exchange server email SH
The application maintains separate search history databases for users logged in with a Profile and users using Guest Mode/Scheduled Tasks run in the context of the Local Logged on User, and Scheduled Tasks run in the context of the Local System Account.
Guest Mode is interactive and would use the same database as a scheduled task run as the local logged on user if the following settings are all enabled. All searches initiated from the console as Locally Logged on User (Interactive or Background) are run in Guest Mode.
The search History settings in a Policy are as follows:
In order for searches initiated from the Console to honor the search history settings, both as Locally Logged on User (Interactive or Background), you need to enable both of the following settings in a System Policy:
The following linked user guide page explains configuring Search History in the Client: http://my.spirion.com/Help/Client_Win/index.htm#using_search_history.htm