The Query Data module is OWL's centralized search capability that enables investigators to search across data stored within the OWL Intelligence Platform. It provides multiple search methods that allow users to locate information quickly using keywords, data sources, geographic locations, free text, or advanced wildcard and range criteria.
Depending on the investigation, users can search across structured and unstructured data from various OWL products, including documents, extracted data, imported records, and other indexed information. Search results can be associated with an existing Case or Subject or performed as standalone (orphan) searches for future reference.
The Query Data module supports several search types to address different investigative needs:
- Data Source Search – Search specific OWL products or selected data sources using intelligent attribute mapping.
- Keyword Search – Search organization-wide data using names, phone numbers, email addresses, social media usernames, identification numbers, addresses, and other searchable attributes.
- Wildcard & Range Search – Perform advanced searches using partial matches, prefixes, suffixes, contains searches, or value ranges for text, dates, numbers, amounts, and other data types.
- Free Text Search – Search both structured and unstructured content using words, phrases, or supported search operators.
- Geospatial Search – Locate information based on addresses, coordinates, or map locations to identify records associated with specific geographic areas.
- Temporary (Orphan) Searches – Execute searches without linking them to a Case or Subject. These searches are automatically assigned a temporary case number and can later be attached to an investigation if required.
Steps to Access Query Data Search Options:
- Hover over Query Data.
-
This will open a menu of all the available searches.
- The searches that are available under the Query Data menu are Data source, Geospatial, Keyword, Smart City View, and Batch (under development).
All Query Data searches support configurable compliance requirements, including retention policies, data access rights, and organization-specific regulations. Users can also associate searches with departments, cases, and subjects, ensuring that search activities remain organized and compliant throughout the investigation lifecycle.
By providing multiple search techniques within a single interface, the Query Data module helps investigators quickly discover relevant information, correlate data across different sources, and efficiently support investigative decision-making.
Temporary or Orphan Data Query Searches
In OWL Intel, orphan searches refer to data query searches initiated without selecting a specific Case or Subject. These searches can only be accessed and launched from the Data Query Logs page within Case Management.
To help users track and utilize these frequently performed standalone searches, OWL automatically assigns a temporary case number to each orphan search. This number is unique across the organization and cannot be manually reused as a standard case number.
While orphan searches cannot be used to initiate new searches under the same temporary case, users can still perform spyglass searches within the context of that temporary case.
Linking an Orphan Search to a record:
Orphan searches can be further linked to any existing Case or subject with the Attach Record option in the Data Query Logs page action menu.
If you detach any Data Query Search from a case and subject, making it an orphan search, a temporary case number is automatically assigned to the orphaned search from OWL.