> ## Documentation Index
> Fetch the complete documentation index at: https://docs.blinkops.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Get TTP URL Logs

Retrieve TTP URL logs.

Required application permissions: `Monitoring | URL Protection | Read`.

> [!NOTE]
>
> External Documentation
>
> To learn more, visit the [Mimecast documentation](https://developer.services.mimecast.com/docs/securityevents/1/routes/api/ttp/url/get-logs/post).

## Parameters

| Parameter | Description |
| - | - |
| Logs End Date | The end date of logs to return. The default is the execution time. |
| Search By Route | Search logs by the route. |
| Search By Scan Results | Search logs by scan result. |
| Search By Start Date | The start date of logs to return. The default is the start of the current day. |
| Sort Descending | Determines whether to order results with the most recent first. |

## Example Output

```json theme={"dark"}
{
	"data": [
		{
			"clickLogs": [
				{
					"action": "string",
					"actions": "string",
					"adminOverride": "string",
					"advancedPhishingResult": {
						"category": "string",
						"creationMethod": "string"
					},
					"date": "yyyy-MM-dd'T'HH:mm:ssZ",
					"emailPartsDescription": [
						"string"
					],
					"fromUserEmailAddress": "string",
					"heuristicDomainSource": "string",
					"messageId": "string",
					"route": "string",
					"scanResult": "string",
					"sendingIp": "string",
					"similarDomain": "string",
					"subject": "string",
					"tagMap": {
						"key": "value"
					},
					"ttpDefinition": "string",
					"url": "string",
					"userAwarenessAction": "string",
					"userEmailAddress": "string",
					"userOverride": "string"
				}
			]
		}
	],
	"fail": [
		{
			"errors": [
				{
					"code": "string",
					"message": "string",
					"retryable": true
				}
			],
			"key": {
				"from": "yyyy-MM-dd'T'HH:mm:ssZ",
				"oldestFirst": true,
				"route": "all",
				"scanResult": "clean",
				"to": "yyyy-MM-dd'T'HH:mm:ssZ"
			}
		}
	]
}
```