Get TTP URL Logs - BlinkOps Documentation

Retrieve TTP URL logs. Required application permissions: Monitoring | URL Protection | Read.

External DocumentationTo learn more, visit the Mimecast documentation.

Parameters

Parameter	Description
Logs End Date	The end date of logs to return. The default is the execution time.
Search By Route	Search logs by the route.
Search By Scan Results	Search logs by scan result.
Search By Start Date	The start date of logs to return. The default is the start of the current day.
Sort Descending	Determines whether to order results with the most recent first.

Example Output

{
	"data": [
		{
			"clickLogs": [
				{
					"action": "string",
					"actions": "string",
					"adminOverride": "string",
					"advancedPhishingResult": {
						"category": "string",
						"creationMethod": "string"
					},
					"date": "yyyy-MM-dd'T'HH:mm:ssZ",
					"emailPartsDescription": [
						"string"
					],
					"fromUserEmailAddress": "string",
					"heuristicDomainSource": "string",
					"messageId": "string",
					"route": "string",
					"scanResult": "string",
					"sendingIp": "string",
					"similarDomain": "string",
					"subject": "string",
					"tagMap": {
						"key": "value"
					},
					"ttpDefinition": "string",
					"url": "string",
					"userAwarenessAction": "string",
					"userEmailAddress": "string",
					"userOverride": "string"
				}
			]
		}
	],
	"fail": [
		{
			"errors": [
				{
					"code": "string",
					"message": "string",
					"retryable": true
				}
			],
			"key": {
				"from": "yyyy-MM-dd'T'HH:mm:ssZ",
				"oldestFirst": true,
				"route": "all",
				"scanResult": "clean",
				"to": "yyyy-MM-dd'T'HH:mm:ssZ"
			}
		}
	]
}

Workflow Library Example

Get Ttp Url Logs with Mimecast and Send Results Via Email

Preview this Workflow on desktop

Get TTP Impersonation Protect Logs List Audit Events

⌘I

​Parameters

​Example Output

​Workflow Library Example

Parameters

Example Output

Workflow Library Example