When GAT+ is installed, our system begins to index all of the emails in every account covering a period of 28 days (4 weeks) prior to the install date. This helps us build up some statistics so you can view recent trends. We then index every email going forward indefinitely.
In cases where you need to search for emails older than 28 days from the date of GAT+ install you can use the real-time search called Gmail Search in GAT+.
Search the entirety of any users mailbox for any set of emails, from any time period, as long as the email is still there (not permanently deleted by the user).
You can exclude “chats” if you use “in:anywhere -in:chats” if you wish to narrow down the search to a specific period use the following search operators after:YYYY/MM/DD and/or before:YYYY/MM/DD. Alternatively, you can use older_than:5d or newer_than:30d.
So the full search term might look like this “in:anywhere -in:chats after:2019/03/01 before:2019/03/31 is:read”. View the full list of search operators available.
The search may take quite some time especially if you’re dealing with thousands of emails.
When the Start Search button is pressed, this will redirect you to the Recent tab. In this tab, you will see the status of all your email searches.
After the search completes, you can select the green check mark and all emails for this user will be displayed.
Once the results are shown, you can add and build new filters on the top of the current search. To find specific emails or examine the totality of that user’s activity.
To add additional filters on top of this real-time search, click on the Apply custom filter button.
One example of using the Apply custom filters in Gmail Search is to narrow down the above search to find only emails with more than 2 email attachments.
You can always return to Gmail Searches you had previously done and remove them from the listing.
In conclusion, Gmail Search provides a powerful alternative to scan based searches but may be slower as the email metadata is not already indexed. If your email audit does not require up to the minute information I would recommend sticking with scan based searches within the Emails tab.