The following table outlines some of the properties that can be used to define a KQL query using a word phrase restriction:
Property |
Examples |
Description |
Attachments |
attachment:report.xlsx attachment:salesreport.docx attachment:pptx attachment:* hasattachment=yes hasattachment:true |
This searches for items that have an attachment with a specific name, such as report.xlsx, or salesreport.docx. You can include partial filenames, as shown in the third example, to find all attachments with a certain extension. The last three examples find all messages that have an attachment. |
Bcc |
Bcc:Bob Bcc:Bob Smith |
This searches for items where Bob was included in the blind carbon copy line. |
Body |