Re: [sleuthkit-users] Keyword Searching for three letter term results in Please Wait

[Brian C. <ca...@sl...>]

Hi Matt,

A few questions:
1)  We've seen that keyword search 'snippets' are one cause of the slowness.  If you go to Tools -> Options -> Keyword search and disable showing snippets, is it still slow? 
2) Are you doing  a regular expression search or normal search? 
3) As Jason mentioned, do you have any characters in the acronym or is it just letters?

brian




On Apr 17, 2014, at 9:35 AM, MATT PIERCE <mat...@ad...> wrote:

> I’m sorry to repost but I was hoping someone could explain why my keyword search didn’t progress.
> 
>  
> 
> From: MATT PIERCE 
> Sent: Monday, April 14, 2014 4:15 PM
> To: sle...@li...
> Subject: Keyword Searching for three letter term results in Please Wait
>  
> 
> I’m running Autopsy 3.0.9.  I have imported two directories worth of extracted files from a workstation under ediscovery.  I can run various keyword searches and get appropriate responses.  When I search for a three letter acronym relevant to the case I get “Please Wait” the search never returns from that state.  Does anyone have any guidance?
> 
> ------------------------------------------------------------------------------
> Learn Graph Databases - Download FREE O'Reilly Book
> "Graph Databases" is the definitive new guide to graph databases and their
> applications. Written by three acclaimed leaders in the field,
> this first edition is now available. Download your free book today!
> http://p.sf.net/sfu/NeoTech_______________________________________________
> sleuthkit-users mailing list
> https://lists.sourceforge.net/lists/listinfo/sleuthkit-users
> http://www.sleuthkit.org