Question

How can I completely reindex a case in FTK/Lab/Enterprise?

 

Answer

Please follow the steps below:

  1. In the case management window, right-click the case and click Remove Generated Index
  2. Click OK when prompted.
  3. Open the case folder and confirm that the "dts_idx" directory has been deleted. (NOTE: On large cases it may take a few minutes to completely delete this folder).
  4. Open the case and use Additional Analysis with the dtSearch Text Index option to index your case.

 

Overview

You may want to reindex all items in a case if it appears that your index has become corrupt.  The steps above will help you do this.