Import body field content

Importing "Body" (Content) Text Fields

For all metadata types there is a field that allows you to import text values into a "body" field. To understand which field this is in correlation to your metadata type, please review our list of metadata types we import. Depending on metadata type, this may be the text value of a message, the details of a transaction or something similar. These fields are indexed and their content searched using the search features of ESI Analyst that include Boolean expressions and other search parameters such as wildcards and proximity. 

For many of the metadata types this field can be imported as plain text or with simple HTML markup. For example, if there is formatting involved in the content of a message that you wish to preserve ESI Analyst supports simple HTML markup using the following HTML tags:
  1. a
  2. em
  3. strong
  4. cite
  5. blockquote
  6. code
  7. ul
  8. ol
  9. li
  10. dl
  11. dt
  12. dd
  13. h1
  14. h2
  15. h3
  16. h4
  17. h5
  18. h6
  19. p
  20. div
  21. sup
  22. br
Note that any other HTML tags will be stripped from the text as well as any embedded styles, fonts or other markup. 

Dealing with large Content fields

Many metadata types may have large content fields, such as a message body of an email. These quickly become cumbersome to include in a load file given their size and data volume. Often times they also may include various special characters that can cause a load file to encounter issues, such as line breaks or carriage returns. To avoid these issues, the content can be ingested via a separate text file. However, in order for the text file to be ingested into the desired item, the text file containing the content MUST be named after the control number of the item and uploaded to the corresponding evidence container to which your import is related.

For example, the line in your load file that contains the metadata related to the item should have a preassigned control number. This control number should then correlate directly to the .txt file you upload that contains the body content of the message. So if the line in your load file has a control number of ABC-00000123, your text file should be named as ABC-00000123.txt. This can be uploaded to a subfolder within the evidence container. 

To learn more about uploading file content visit our article on uploading files using ESI Sync

    • Related Articles

    • Understanding the Available Fields for Computer Activity

      Overview Computer forensic artifacts, proprietary platforms and structured data are a part of many investigations and growing in eDiscovery projects. With Computer Activity, you can use this category for many different types of data. This article ...
    • Importing Sender and Recipient(s) Field Values

      Sender and recipient fields can be provided via a load file for importation into ESI Analyst for a multitude of communication types. Values can be free form text, email, phone number or other unique identifiers that are used in the communication ...
    • How to Import Communications and Attachments Through ESI Analyst

      Communications encompass a variety of communications. The system accepts the following load file formats: CSV, Pipe, Tab or DAT delimited files. Depending on how the data was collected or produced, you may not have a UFDR where you could use ESI ...
    • Understanding the Available Fields for Communications

      When importing communications data like text messages, chat messages, emails etc. you will have a list of fields that are available for your import. Generally, it is easiest to match closely the titles in ESI Analyst to your load file. Your load file ...
    • How to Import Electronic Files of Any Type into ESI Analyst

      Electronic files of any type are always an important part of any investigation. You can easily load any type of electronic file or media through ESI Analyst's import system. To import files and media you will want to select Computer Activity under ...