Data Export data model

Data Export sends data in two formats depending on the data source selected:

• Event-based (JSON) — discrete events emitted when something happens in UiPath (a job changes state, a queue item is processed, an audit action is recorded). Delivered to Azure Event Hub or AWS SQS.
• OTEL Trace — hierarchical spans representing agent and Maestro execution traces in OpenTelemetry format. Delivered to Arize, Databricks, or any OTLP (OpenTelemetry Protocol)-compatible endpoint.

Event-based (JSON) exports

Orchestrator Events

Orchestrator emits events for Jobs, Queue Items, Machines, and Robot Logs. Each event includes a common envelope plus an entity-specific body.

Allgemeine Felder

All Orchestrator events include the following fields:

Feld	Beschreibung
Ereignistyp	String identifying the event type (for example, job.created, queueitem.added).
SchemaVersion	Schema version identifier.
Zeitstempel	UTC-Zeitstempel des Ereignisses.
TenantKey	Tenant identifier.
Mandantenname	Tenant display name.
FolderKey	Folder identifier.
Ordnername	Anzeigename des Ordners.
FullFolderPath	Full folder path.

Job events

Emitted on: job.created, job.started, job.stopped, job.pending, job.completed, job.faulted, job.stopping, job.terminating

Feld	Typ	Beschreibung
Schlüssel	GUID	Unique job identifier.
Erstellungszeit	Zeitstempel	Job creation time.
StartTime	Zeitstempel	Execution start time.
EndTime	Zeitstempel	Execution end time.
Status (State)	String	Job status: Pending, Running, Stopping, Terminating, Faulted, Successful, Stopped, Suspended, Resumed.
ProcessName	String	Source package name.
DisplayName	String	Display name in Orchestrator.
RoboterName (RobotName)	String	Executing robot identifier.
Name der Hostmaschine	String	Execution machine name.

Queue item events

Emitted on: queueitem.added, queueItem.deferred, queueItem.reviewStatusChanged, queueItem.retried, queueItem.updated, queueItem.transactionAbandoned, queueItem.transactionCompleted, queueItem.transactionFailed, queueItem.transactionRetried, queueItem.transactionStarted

Feld	Typ	Beschreibung
Schlüssel	GUID	Queue item identifier.
ID Warteschlangendefinition (QueueDefinitionId)	Nummer	Queue numeric ID.
Status	String	Item status: New, InProgress, Failed, Successful, Abandoned, Retried, Deleted, Unknown.
Status überprüfen (Review Status)	String	Review classification: None, InReview, Verified, Retried, Unknown.
Priorität	String	Item priority: High, Normal, Low, Unknown.
Fälligkeitsdatum (DueDate)	DateTime	Processing deadline.
Erstellungszeit	DateTime	Creation timestamp.
Verarbeitung starten (StartProcessing)	DateTime	Processing start time.
Verarbeitung beenden (EndProcessing)	DateTime	Processing completion time.
Verschiebungsdatum (DeferDate)	DateTime	Earliest available processing time.
SecondsInPreviousAttempt	Nummer	Duration of the previous attempt in seconds.
Wiederholungsanzahl (RetryNumber)	Nummer	Number of processing attempts.
Fortschritt	String	Business flow progress.
Analysedaten	String	Analytics property key-value pairs.
Ausgabe	String	Output data from the Set Transaction Status activity.
Spezielle Daten (SpecificData)	String	Custom data from the Specific Content property or Add Queue Item activity.
CreatorJobId	Nummer	Creating job identifier.
ExecutorJobId	Nummer	Executing job identifier.
ProcessExceptionReason	String	Failure summary.
ProcessExceptionDetails	String	Failure details.
ProcessExceptionType	String	Error type: ApplicationException, BusinessException, None.

The Queue object embedded in each event includes: Key, Name, Description, MaxNumberOfRetries, EnforceUniqueReference, SlaInMinutes, RiskSlaInMinutes.

Hinweis:

SpecificData, SpecificContent, and Output are not included in queueItem.deferred and queueItem.reviewStatusChanged events.

Machine events

Emitted on: machine.created, machine.updated, machine.deleted, machine.assign, machine.unassign

Feld	Typ	Beschreibung
Maschinen-ID	Nummer	Machine numeric ID.
MachineKey	GUID	Machine identifier.
Maschinenname	String	Machine custom name.
AutomationCloudSlots	Nummer	Reserved runtime slots.
HeadlessSlots	Nummer	Headless mode slots.
NonProductionSlots	Nummer	Non-production environment slots.
UnattendedSlots	Nummer	Unattended execution slots.

Machine session events (machineSession.status) include:

Feld	Typ	Beschreibung
MachineKey	GUID	Machine identifier.
Maschinenname	String	Machine custom name.
Name der Hostmaschine	String	Host system name.
Dienstbenutzername	String	Robot service account.
Maschinenstatus	String	Status: Available, Busy, Disconnected, Unknown.
Zeitstempel	DateTime	Event timestamp.
IsUnresponsive	Boolescher	Whether the connection is unresponsive.

Robot log events

Emitted on: robotlog

Feld	Typ	Beschreibung
Meldung	String	Log content.
Ebene	String	Severity: Trace, Info, Warn, Error, Fatal.
Protokolltyp	String	Category: User, Default, Error, Business, ExecutionStep, Info, Security, Technical.
Zeitstempel	DateTime	Generation timestamp.
JobId	GUID	Job key.
ProcessName	String	Executing process name.
Prozessversion	String	Process version.
RoboterName (RobotName)	String	Robot identifier.
Maschinen-ID	Nummer	Machine numeric ID.
MachineKey	GUID	Machine identifier.
Maschinenname	String	Machine name.
Name der Hostmaschine	String	Host machine name (session logs only).
Windows-Identität	String	Acting user account.
initiatedBy	String	Execution source: Assistant, Studio, StudioX, Orchestrator, CommandLine, RobotAPI.
FileName	String	Executed .xaml file name.
Aktivitätsinfo	JSON	Activity metadata: DisplayName, State, Activity, Arguments.
Benutzerdefinierte Felder	JSON	Custom fields added via the AddLogFields activity.
Warteschlangenname (QueueName)	String	Source queue name (queue processing only).
Transaktions-ID	GUID	Transaction key (queue processing only).
transactionState	String	Started, Ended, Postponed (queue processing only).
transactionStatus	String	Start, Success, Failed, BusinessException, ApplicationException (queue processing only).
Transaktionsausführungszeit	Nummer	Execution duration in seconds (queue processing only).
GesamtausführungszeitInSekunden	Nummer	Total execution duration (queue processing only).
queueItemPriority	String	High, Normal, Low (queue transaction end logs only).
ÜberprüfungsstatusDes Warteschlangenelements	String	InReview, Verified, Reported, Retried (queue transaction end logs only).
ProcessingExceptionReason	String	Exception reason (queue transaction end logs only).
Typ der Verarbeitungsausnahme	String	ApplicationException or BusinessException (queue transaction end logs only).

---

Maestro Events

Maestro emits events for Process Runs, Element Runs, and Incidents.

Standard fields

All Maestro events include the following fields:

Feld	Beschreibung
OrganizationId	Identifier of the organization emitting the event.
TenantId	Identifier of the tenant emitting the event.
FolderKey	Folder or workspace identifier.
ProcessKey	Identifier of the process definition.
InstanceId	Identifier of the process instance.
RunId	Identifier of the process run.
SpanType	Maestro event type: Incident, ProcessRun, ElementRun, InstanceOperation.
Status	Current lifecycle state of the event.
EventUniqueId	Globally unique identifier of the emitted event.
EventTimeUtc	Timestamp when the event was emitted.
TraceAttributes	Optional trace-level metadata (nullable).
SpanAttributes	Stringified JSON of additional span-specific attributes.

Incident fields

Feld	Beschreibung
ElementId	Element where the incident occurred.
ElementRunId	Element run associated with the incident.
IncidentUpdateTimeUtc	Timestamp when the incident was last updated.
Kommentar (Comment)	Optional comment associated with the incident.
ErrorCode	Error code for the incident.
ErrorMessage	Short error message.
ErrorDetails	Detailed error information.
DebugMode	Debug mode state when the incident occurred.

Process run fields

Feld	Beschreibung
StartTimeUtc	Process run start time in UTC.
SpanName	Human-readable name of the span or event.
Ablaufverfolgungs-ID	Distributed trace identifier for correlation.
SpanId	Span identifier for this process run.
ParentSpanId	Parent span identifier (nullable for root spans).
PackageId	Package identifier.
PackageKey	Package key, typically includes version.
PackageVersion	Paketversion
Releasename	Human-readable release name.
ExternalId	External correlation identifier.
Quelle	Trigger source of the run (for example, Manual).
DebugModeType	Debug mode configuration.
CreatorUserKey	User that initiated the run (nullable).
CaseInstanceId	Case instance identifier (nullable).
CaseManagementMetadata	Case management metadata (nullable).

Element run fields

Feld	Beschreibung
StartTimeUtc	Element execution start time in UTC.
EndTimeUtc	Element execution end time in UTC.
SpanName	Human-readable name of the span or event.
Ablaufverfolgungs-ID	Distributed trace identifier for correlation.
SpanId	Span identifier for this element run.
ParentSpanId	Parent span identifier (nullable).
Variablen	Structured variables captured at element execution.
VariablesJson	Variables serialized as JSON.
ElementRun.ElementId	Identifier of the element.
ElementRun.ElementName	Display name of the element.
ElementRun.ElementType	Element type.
ElementRun.ElementExtensionType	Extension type (nullable).
ElementRun.ElementRunId	Element run identifier.
ElementRun.IncomingFlowId	Incoming flow identifier.
ElementRun.IncomingFlowIds	Incoming flow identifiers array (nullable).
ElementRun.CaseStageElementId	Case stage element identifier (nullable).
ElementRun.CaseManagementMetadata	Case metadata at element level (nullable).

Example: Element run event

{
  "ElementRun": {
    "ProcessRun": {
      "ProcessInstance": {
        "OrganizationId": "85d09b09-268b-4748-abfd-738402122e7d",
        "TenantId": "1777e378-59ea-4c6a-a6bf-c2e88fb6d2a1",
        "FolderKey": "cb0b27ed-0211-4a77-81a7-00530f85c67a",
        "PackageId": "Trace.Test.agentic.Agentic.Process",
        "PackageKey": "Trace.Test.agentic.Agentic.Process:1.0.0",
        "PackageVersion": "1.0.0",
        "ReleaseName": "Agentic Process",
        "ProcessKey": "ee34bc76-4989-487d-8cdc-0bc6ea87fae4",
        "InstanceId": "aafa3baa-dd48-46b9-bfea-2cf1acd999c3",
        "CaseInstanceId": null,
        "ExternalId": "44777039",
        "Source": "Manual",
        "DebugModeType": "None",
        "CreatorUserKey": null
      },
      "RunId": "aafa3baa-dd48-46b9-bfea-2cf1acd999c3",
      "CaseManagementMetadata": null
    },
    "ElementId": "__Action=Pending__",
    "ElementName": "",
    "ElementType": "__InstanceAction__",
    "ElementExtensionType": null,
    "ElementRunId": "4e410977-6373-4c02-ba81-1699ac94bdc6",
    "IncomingFlowId": "",
    "IncomingFlowIds": null,
    "CaseStageElementId": null,
    "CaseManagementMetadata": null
  },
  "StartTimeUtc": "2026-01-06T21:15:42.7806522Z",
  "EndTimeUtc": "2026-01-06T21:15:42.7806522Z",
  "Status": "Pending",
  "Variables": {},
  "VariablesJson": "{}",
  "SpanName": "Instance Created",
  "TraceId": "aafa3baa-dd48-46b9-bfea-2cf1acd999c3",
  "SpanId": "4e410977-6373-4c02-ba81-1699ac94bdc6",
  "ParentSpanId": null,
  "SpanType": "InstanceOperation",
  "EventUniqueId": "d0195ac7-3770-44f8-8d88-a74b53b6218a",
  "EventTimeUtc": "2026-01-06T21:15:42.7806522Z",
  "TraceAttributes": null,
  "SpanAttributes": "{\"spanType\":\"InstanceOperation\",\"operationType\":\"InstanceCreated\",\"comment\":\"\",\"userId\":\"00000000-0000-0000-0000-000000000000\"}"
}

---

Audit Log Events

Audit log exports support both tenant-level and organization-level audit events.

Tenant-level sources:

Identity and access: Identity, OMS, KMS, Licensing, AuthZ, Routing

Products and services: Integration Service, Data Service, Test Manager, Automation Ops, Apps, Document Understanding

Organization-level sources: Organization-scoped policy and user management events.

Standard fields

Feld	Beschreibung
ID	Globally unique identifier of the audit event.
LocalId	Internal sequential identifier for ordering.
Erstellt am	Timestamp when the event was created.
Zuletzt geändert	Timestamp of the last modification (nullable).
Version	Version of the audit event record.
Status (State)	Internal lifecycle state of the event.
Status	Outcome of the event (numeric enum).
Ereignistyp	Identifier of the action performed.
EventSource	Identifier of the product or system emitting the event.
EventTarget	Identifier of the event category.
EventDetails	Embedded JSON with event-specific details (see below).
ServiceName	Human-readable name of the emitting service.
ClientInfo	Embedded JSON with IpAddress and IpCountry.
ActorId	Unique identifier of the actor.
ActorName	Display name of the actor.
ActorEmail	Email of the actor (nullable).
ActorDetails	Embedded JSON with metadata describing the actor.
OrganizationId	Organization identifier.
Organisationsname	Organization name.
TenantId	Tenant identifier (nullable for organization-level events).
Mandantenname	Tenant name (nullable for organization-level events).
Ursprung	Infrastructure or regional origin of the event.

EventDetails fields by service

The EventDetails field is a JSON string whose structure depends on the emitting service.

Identity / Authentication events:

Feld	Beschreibung
User.Id	Identifier of the user.
User.DisplayName	User display name.
User.Email	User email.
User.Type	User type (enum).
LoginMethod	Authentication method.
Client-ID	OAuth client identifier.
Scopes	Granted or requested scopes.

Apps events:

Feld	Beschreibung
appId	Unique app identifier.
appName	Application name.
appType	Type of application.
Version	Application version.
Beschreibung	App description.
folderName	Folder containing the app.
isActionApp	Whether the app is an action app.
isPublicApp	Whether the app is publicly visible.

Integration Service events:

Feld	Beschreibung
ConnectionId	Integration connection identifier.
ConnectionName	Name of the connection.
Connector	Connector display name.
ConnectorKey	Unique connector key.

Admin / Policy events:

Feld	Beschreibung
PolicyId	Policy identifier.
PolicyName	Policy name.
CreatedPolicy	Policy creation metadata.
DeletedPolicy	Policy deletion metadata.
ModifiedFields	Fields changed during the update.

License Resource Manager events:

Feld	Beschreibung
ProductName	Licensed product name.
OldQuantity	Previous license quantity.
NewQuantity	Updated license quantity.
TenantId	Affected tenant.
Mandantenname	Affected tenant name.
AdminName	Administrator who performed the change.

Data Service (DataFabric) events:

Feld	Beschreibung
EntityId	Identifier of the DataFabric entity.
Entitätsname	Name of the entity.
Datensatz-ID	Identifier of the affected record.
changedProperties	Properties modified by the operation.
Zeitstempel	DataFabric-specific event timestamp.

Example: Audit log event

{
  "LocalId": 158693,
  "State": 0,
  "LastModified": null,
  "Version": 1,
  "Id": "6cfeca16-2f9f-4ca1-8d06-be64003df865",
  "CreatedOn": "2026-01-10T16:15:46.5597482",
  "OrganizationId": "2511e08f-6fa5-40af-b4bb-ef3f077cb7a1",
  "OrganizationName": "2511e08f-6fa5-40af-b4bb-ef3f077cb7a1",
  "TenantId": null,
  "TenantName": null,
  "ActorId": "810e5c03-8284-47d4-a0b8-da238ee636e6",
  "ActorName": "System Administrator",
  "ActorEmail": null,
  "ActorDetails": "{\"Type\":1}",
  "EventType": "4ffc49e7-15b1-4c31-ba2d-a6dcdce716e7",
  "EventSource": "80c7a790-c3a8-4077-b4a4-fe6f9f947855",
  "EventTarget": "738aa382-1e14-48c8-a296-2868a1e5a22a",
  "EventDetails": "{\"User\":{\"Id\":\"1f8292e0-c86c-4bb3-b3bc-f9cebe546bbd\",\"DisplayName\":\"Test User\",\"Email\":\"[e-mail]\",\"Type\":0}}",
  "ServiceName": "Identity",
  "Status": 0,
  "ClientInfo": null,
  "Origin": "alp-wus2-01-platform"
}

---

OTEL Trace exports

Agent and Maestro traces are exported in OpenTelemetry (OTEL) format. Each execution generates a tree of spans — one root span per agent or Maestro run, with child spans for each LLM call, tool call, and guardrail evaluation.

OTEL span fields

OTEL Field	Beschreibung
traceId	Trace identifier. Groups all spans belonging to one execution.
spanId	Unique identifier for this span.
parentSpanId	Parent span identifier. Empty string for root spans.
name	Human-readable span name (for example, Agent run - googlesearch, LLM call).
kind	Span kind: SPAN_KIND_INTERNAL or SPAN_KIND_CLIENT.
startTimeUnixNano	Span start time in Unix nanoseconds.
endTimeUnixNano	Span end time in Unix nanoseconds.
status.code	Execution status: STATUS_CODE_OK or STATUS_CODE_ERROR.
status.message	Status message (empty string when no error).
attributes.*	Span attributes flattened using dot notation (see below).

UiPath attribute mapping

UiPath's internal trace fields map to OTEL attributes as follows:

UiPath-Feld	OTEL attribute	Hinweise
ID	span_id	Unique span identifier.
Ablaufverfolgungs-ID	trace_id	Trace identifier.
ParentId	parent_span_id	Null for root spans.
Name	name	Span name.
StartTime	start_time_unix_nano	Converted to Unix nanoseconds.
EndTime	end_time_unix_nano	Converted to Unix nanoseconds.
Status	status.code	1 = OK, 2 = ERROR.
Attribute	attributes	JSON string parsed into key-value pairs using dot notation.
SpanType, OrganizationId, TenantId, FolderKey, JobKey, ProcessKey, Source, VerbosityLevel	attributes.uipath.*	All UiPath metadata fields.

Span attribute types

The Attributes field in UiPath's internal schema contains a JSON string that is parsed and flattened into OTEL span attributes using dot notation. The structure depends on the span type.

agentRun attributes (attributes.type = "agentRun"):

Attribut	Beschreibung
type, agentId, agentName, agentVersion	Agent identity fields.
systemPrompt, userPrompt	Agent prompts.
inputSchema, outputSchema	Input and output schemas.
input, output, source	Execution inputs, outputs, and trigger source.
error	Error details, if present.

completion attributes (attributes.type = "completion"):

Attribut	Beschreibung
type, model	Span type and LLM model identifier.
settings.maxTokens, settings.temperature	LLM settings.
toolCalls	Array of tool calls made during completion.
usage.completionTokens, usage.promptTokens, usage.totalTokens	Token usage.
usage.isByoExecution, usage.executionDeploymentType, usage.isPiiMasked	Execution metadata.
error	Error details, if present.

toolCall attributes (attributes.type = "toolCall"):

Attribut	Beschreibung
type, callId, toolName	Tool call identity.
arguments, toolType	Call arguments and tool type.
Ergebnis	Tool call result.
error	Error details, if present.

toolGuardrailEvaluation attributes (attributes.type = "toolGuardrailEvaluation"):

Attribut	Beschreibung
type, guardrailName, guardrailDescription	Guardrail identity.
guardrailAction, details, action	Guardrail action and outcome.
arguments, result	Evaluation inputs and result.
severityLevel	Severity classification.
error	Error details, if present.

Export limits

Grenzwert	Wert
Max individual attribute value	32 KB
Max total attributes per span	256 KB
Max OTLP batch size	~1 MB (protobuf)
File attachments	Metadata only (ID, filename, MIME type). File content is not exported.

Example: OTEL trace (four spans for one agent run)

[
  {
    "traceId": "10f78499ce774eaba05699f234e1c75d",
    "spanId": "a4bd5687817248fc",
    "parentSpanId": "",
    "name": "Agent run - googlesearch",
    "kind": "SPAN_KIND_INTERNAL",
    "startTimeUnixNano": "1728000235632009500",
    "endTimeUnixNano": "1728000248153231700",
    "attributes.type": "agentRun",
    "attributes.agentId": "80a61442-d3e1-4d10-966e-47e0bccc707d",
    "attributes.agentName": "googlesearch",
    "attributes.agentVersion": "1.0.0",
    "attributes.input.search_query": "google",
    "attributes.output.summary": "The search results for 'Google' include the official Google homepage.",
    "attributes.source": "playground",
    "attributes.uipath.organization_id": "9568beba-50a8-49d1-801e-f2d1711089fd",
    "attributes.uipath.tenant_id": "86011afe-5252-4e44-8805-b3430072d040",
    "attributes.uipath.span_type": "agentRun",
    "status.code": "STATUS_CODE_OK",
    "status.message": ""
  },
  {
    "traceId": "10f78499ce774eaba05699f234e1c75d",
    "spanId": "4c10aa5169c44a17",
    "parentSpanId": "a4bd5687817248fc",
    "name": "LLM call",
    "kind": "SPAN_KIND_CLIENT",
    "startTimeUnixNano": "1728000238084433000",
    "endTimeUnixNano": "1728000245772907200",
    "attributes.type": "completion",
    "attributes.model": "gpt-4o-2024-11-20",
    "attributes.settings.maxTokens": 16384,
    "attributes.settings.temperature": 0,
    "attributes.usage.completionTokens": 491,
    "attributes.usage.promptTokens": 1110,
    "attributes.usage.totalTokens": 1601,
    "attributes.uipath.span_type": "completion",
    "status.code": "STATUS_CODE_OK",
    "status.message": ""
  },
  {
    "traceId": "10f78499ce774eaba05699f234e1c75d",
    "spanId": "0fde078a923d484e",
    "parentSpanId": "4c10aa5169c44a17",
    "name": "LLM",
    "kind": "SPAN_KIND_CLIENT",
    "startTimeUnixNano": "1728000238979846800",
    "endTimeUnixNano": "1728000245095082400",
    "attributes.type": "completion",
    "attributes.model": "gpt-4o-2024-11-20",
    "attributes.uipath.span_type": "completion",
    "status.code": "STATUS_CODE_OK",
    "status.message": ""
  },
  {
    "traceId": "10f78499ce774eaba05699f234e1c75d",
    "spanId": "7fc828f5295d4788",
    "parentSpanId": "a4bd5687817248fc",
    "name": "Agent output",
    "kind": "SPAN_KIND_INTERNAL",
    "startTimeUnixNano": "1728000246820034400",
    "endTimeUnixNano": "1728000246820034400",
    "attributes.type": "agentOutput",
    "attributes.output.summary": "The search results for 'Google' include the official Google homepage.",
    "attributes.uipath.span_type": "agentOutput",
    "status.code": "STATUS_CODE_OK",
    "status.message": ""
  }
]