Autopsy Keyword Search Module
Autopsy uses Lucene SOLR for indexed keyword searching.
Autopsy allows you to find files using regular expressions. it uses the Java syntax: http://docs.oracle.com/javase/7/docs/api/java/util/regex/Pattern.html
This section contains some tips for debugging SOLR issues. See also the Autopsy 3 Troubleshooting page for ideas.
- Connect to the admin console using
- You can see query results with a string like this (replace foo with the search term):
- You can get a debug query with this:
- You can do a regexp test query with this (replace foo with regexp):