Data Export data model

Data Export sends data in two formats depending on the data source selected:

• Event-based (JSON) — discrete events emitted when something happens in UiPath (a job changes state, a queue item is processed, an audit action is recorded). Delivered to Azure Event Hub or AWS SQS.
• OTEL Trace — hierarchical spans representing agent and Maestro execution traces in OpenTelemetry format. Delivered to Arize, Databricks, or any OTLP (OpenTelemetry Protocol)-compatible endpoint.

Event-based (JSON) exports

Orchestrator Events

Orchestrator emits events for Jobs, Queue Items, Machines, and Robot Logs. Each event includes a common envelope plus an entity-specific body.

Campos comunes

All Orchestrator events include the following fields:

Campo	Descripción
TipoDeEvento	String identifying the event type (for example, job.created, queueitem.added).
SchemaVersion	Schema version identifier.
Marca de tiempo	Marca de tiempo UTC del evento.
TenantKey	Tenant identifier.
NombreDeTenant	Tenant display name.
FolderKey	Folder identifier.
NombreDeCarpeta	Nombre para mostrar de la carpeta.
FullFolderPath	Full folder path.

Job events

Emitted on: job.created, job.started, job.stopped, job.pending, job.completed, job.faulted, job.stopping, job.terminating

Campo	Tipo	Descripción
Clave	GUID	Unique job identifier.
Hora de creación	Marca de tiempo	Job creation time.
HoraDeInicio	Marca de tiempo	Execution start time.
HoraDeFinalización	Marca de tiempo	Execution end time.
Estado	Cadena	Job status: Pending, Running, Stopping, Terminating, Faulted, Successful, Stopped, Suspended, Resumed.
NombreDelProceso	Cadena	Source package name.
NombreParaMostrar	Cadena	Display name in Orchestrator.
Nombre del robot	Cadena	Executing robot identifier.
Nombre del equipo host	Cadena	Execution machine name.

Queue item events

Emitted on: queueitem.added, queueItem.deferred, queueItem.reviewStatusChanged, queueItem.retried, queueItem.updated, queueItem.transactionAbandoned, queueItem.transactionCompleted, queueItem.transactionFailed, queueItem.transactionRetried, queueItem.transactionStarted

Campo	Tipo	Descripción
Clave	GUID	Queue item identifier.
QueueDefinitionId	Número	Queue numeric ID.
Estado	Cadena	Item status: New, InProgress, Failed, Successful, Abandoned, Retried, Deleted, Unknown.
ReviewStatus	Cadena	Review classification: None, InReview, Verified, Retried, Unknown.
Prioridad	Cadena	Item priority: High, Normal, Low, Unknown.
DueDate	Datetime	Processing deadline.
Hora de creación	Datetime	Creation timestamp.
StartProcessing	Datetime	Processing start time.
Finalizar procesamiento	Datetime	Processing completion time.
DeferDate	Datetime	Earliest available processing time.
SecondsInPre anterior	Número	Duration of the previous attempt in seconds.
Número de reintento	Número	Number of processing attempts.
Progreso	Cadena	Business flow progress.
Datos de análisis	Cadena	Analytics property key-value pairs.
Salida	Cadena	Output data from the Set Transaction Status activity.
Datos específicos	Cadena	Custom data from the Specific Content property or Add Queue Item activity.
ID de trabajo del creador	Número	Creating job identifier.
ID de trabajo del ejecutor	Número	Executing job identifier.
ProcessExceptionReason	Cadena	Failure summary.
ProcessExceptionDetails	Cadena	Failure details.
ProcessExceptionType	Cadena	Error type: ApplicationException, BusinessException, None.

The Queue object embedded in each event includes: Key, Name, Description, MaxNumberOfRetries, EnforceUniqueReference, SlaInMinutes, RiskSlaInMinutes.

Nota:

SpecificData, SpecificContent, and Output are not included in queueItem.deferred and queueItem.reviewStatusChanged events.

Machine events

Emitted on: machine.created, machine.updated, machine.deleted, machine.assign, machine.unassign

Campo	Tipo	Descripción
ID de equipo	Número	Machine numeric ID.
Clave de máquina	GUID	Machine identifier.
Nombre de la máquina	Cadena	Machine custom name.
AutomationCloudSlots	Número	Reserved runtime slots.
HeadlessSlots	Número	Headless mode slots.
NonProductionSlots	Número	Non-production environment slots.
UnattendedSlots	Número	Unattended execution slots.

Machine session events (machineSession.status) include:

Campo	Tipo	Descripción
Clave de máquina	GUID	Machine identifier.
Nombre de la máquina	Cadena	Machine custom name.
Nombre del equipo host	Cadena	Host system name.
Nombre de usuario del servicio	Cadena	Robot service account.
Estado de la máquina	Cadena	Status: Available, Busy, Disconnected, Unknown.
Marca de tiempo	Datetime	Event timestamp.
IsUnresponsive	Booleano	Whether the connection is unresponsive.

Robot log events

Emitted on: robotlog

Campo	Tipo	Descripción
Mensaje	Cadena	Log content.
Nivel	Cadena	Severity: Trace, Info, Warn, Error, Fatal.
TipoDeRegistro	Cadena	Category: User, Default, Error, Business, ExecutionStep, Info, Security, Technical.
Marca de tiempo	Datetime	Generation timestamp.
ID del trabajo	GUID	Job key.
NombreDelProceso	Cadena	Executing process name.
Versión de proceso	Cadena	Process version.
Nombre del robot	Cadena	Robot identifier.
ID de equipo	Número	Machine numeric ID.
Clave de máquina	GUID	Machine identifier.
Nombre de la máquina	Cadena	Machine name.
Nombre del equipo host	Cadena	Host machine name (session logs only).
Identidad de Windows	Cadena	Acting user account.
iniciado por	Cadena	Execution source: Assistant, Studio, StudioX, Orchestrator, CommandLine, RobotAPI.
NombreDeArchivo	Cadena	Executed .xaml file name.
InformaciónDeActividad	JSON	Activity metadata: DisplayName, State, Activity, Arguments.
Campos personalizados	JSON	Custom fields added via the AddLogFields activity.
NombreDeCola	Cadena	Source queue name (queue processing only).
ID de transacción	GUID	Transaction key (queue processing only).
EstadoDeTransacción	Cadena	Started, Ended, Postponed (queue processing only).
EstatusDeTransacción	Cadena	Start, Success, Failed, BusinessException, ApplicationException (queue processing only).
TiempoDeEjecuciónDeTransacción	Número	Execution duration in seconds (queue processing only).
TiempoTotalDeEjecuciónEnSegundos	Número	Total execution duration (queue processing only).
PrioridadDeElementoDeCola	Cadena	High, Normal, Low (queue transaction end logs only).
EstadoDeRevisiónDeArtículoEnCola	Cadena	InReview, Verified, Reported, Retried (queue transaction end logs only).
ProcessingExceptionReason	Cadena	Exception reason (queue transaction end logs only).
TipoDeExcepciónDeProcedimiento	Cadena	ApplicationException or BusinessException (queue transaction end logs only).

---

Maestro Events

Maestro emits events for Process Runs, Element Runs, and Incidents.

Standard fields

All Maestro events include the following fields:

Campo	Descripción
IDDeOrganización	Identifier of the organization emitting the event.
IDdeTenant	Identifier of the tenant emitting the event.
FolderKey	Folder or workspace identifier.
ProcessKey	Identifier of the process definition.
InstanceId	Identifier of the process instance.
RunId	Identifier of the process run.
SpanType	Maestro event type: Incident, ProcessRun, ElementRun, InstanceOperation.
Estado	Current lifecycle state of the event.
EventUniqueId	Globally unique identifier of the emitted event.
EventTimeUtc	Timestamp when the event was emitted.
TraceAttributes	Optional trace-level metadata (nullable).
SpanAttributes	Stringified JSON of additional span-specific attributes.

Incident fields

Campo	Descripción
ElementId	Element where the incident occurred.
ElementRunId	Element run associated with the incident.
IncidentUpdateTimeUtc	Timestamp when the incident was last updated.
Comentario	Optional comment associated with the incident.
ErrorCode	Error code for the incident.
ErrorMessage	Short error message.
ErrorDetails	Detailed error information.
DebugMode	Debug mode state when the incident occurred.

Process run fields

Campo	Descripción
StartTimeUtc	Process run start time in UTC.
SpanName	Human-readable name of the span or event.
ID de seguimiento	Distributed trace identifier for correlation.
SpanId	Span identifier for this process run.
ParentSpanId	Parent span identifier (nullable for root spans).
PackageId	Package identifier.
PackageKey	Package key, typically includes version.
PackageVersion	Versión del paquete.
Nombre de la versión	Human-readable release name.
ExternalId	External correlation identifier.
Origen	Trigger source of the run (for example, Manual).
DebugModeType	Debug mode configuration.
CreatorUserKey	User that initiated the run (nullable).
CaseInstanceId	Case instance identifier (nullable).
CaseManagementMetadata	Case management metadata (nullable).

Element run fields

Campo	Descripción
StartTimeUtc	Element execution start time in UTC.
EndTimeUtc	Element execution end time in UTC.
SpanName	Human-readable name of the span or event.
ID de seguimiento	Distributed trace identifier for correlation.
SpanId	Span identifier for this element run.
ParentSpanId	Parent span identifier (nullable).
Variables	Structured variables captured at element execution.
VariablesJson	Variables serialized as JSON.
ElementRun.ElementId	Identifier of the element.
ElementRun.ElementName	Display name of the element.
ElementRun.ElementType	Element type.
ElementRun.ElementExtensionType	Extension type (nullable).
ElementRun.ElementRunId	Element run identifier.
ElementRun.IncomingFlowId	Incoming flow identifier.
ElementRun.IncomingFlowIds	Incoming flow identifiers array (nullable).
ElementRun.CaseStageElementId	Case stage element identifier (nullable).
ElementRun.CaseManagementMetadata	Case metadata at element level (nullable).

Example: Element run event

{
  "ElementRun": {
    "ProcessRun": {
      "ProcessInstance": {
        "OrganizationId": "85d09b09-268b-4748-abfd-738402122e7d",
        "TenantId": "1777e378-59ea-4c6a-a6bf-c2e88fb6d2a1",
        "FolderKey": "cb0b27ed-0211-4a77-81a7-00530f85c67a",
        "PackageId": "Trace.Test.agentic.Agentic.Process",
        "PackageKey": "Trace.Test.agentic.Agentic.Process:1.0.0",
        "PackageVersion": "1.0.0",
        "ReleaseName": "Agentic Process",
        "ProcessKey": "ee34bc76-4989-487d-8cdc-0bc6ea87fae4",
        "InstanceId": "aafa3baa-dd48-46b9-bfea-2cf1acd999c3",
        "CaseInstanceId": null,
        "ExternalId": "44777039",
        "Source": "Manual",
        "DebugModeType": "None",
        "CreatorUserKey": null
      },
      "RunId": "aafa3baa-dd48-46b9-bfea-2cf1acd999c3",
      "CaseManagementMetadata": null
    },
    "ElementId": "__Action=Pending__",
    "ElementName": "",
    "ElementType": "__InstanceAction__",
    "ElementExtensionType": null,
    "ElementRunId": "4e410977-6373-4c02-ba81-1699ac94bdc6",
    "IncomingFlowId": "",
    "IncomingFlowIds": null,
    "CaseStageElementId": null,
    "CaseManagementMetadata": null
  },
  "StartTimeUtc": "2026-01-06T21:15:42.7806522Z",
  "EndTimeUtc": "2026-01-06T21:15:42.7806522Z",
  "Status": "Pending",
  "Variables": {},
  "VariablesJson": "{}",
  "SpanName": "Instance Created",
  "TraceId": "aafa3baa-dd48-46b9-bfea-2cf1acd999c3",
  "SpanId": "4e410977-6373-4c02-ba81-1699ac94bdc6",
  "ParentSpanId": null,
  "SpanType": "InstanceOperation",
  "EventUniqueId": "d0195ac7-3770-44f8-8d88-a74b53b6218a",
  "EventTimeUtc": "2026-01-06T21:15:42.7806522Z",
  "TraceAttributes": null,
  "SpanAttributes": "{\"spanType\":\"InstanceOperation\",\"operationType\":\"InstanceCreated\",\"comment\":\"\",\"userId\":\"00000000-0000-0000-0000-000000000000\"}"
}

---

Audit Log Events

Audit log exports support both tenant-level and organization-level audit events.

Tenant-level sources:

Identity and access: Identity, OMS, KMS, Licensing, AuthZ, Routing

Products and services: Integration Service, Data Service, Test Manager, Automation Ops, Apps, Document Understanding

Organization-level sources: Organization-scoped policy and user management events.

Standard fields

Campo	Descripción
ID	Globally unique identifier of the audit event.
LocalId	Internal sequential identifier for ordering.
Creado en	Timestamp when the event was created.
Última modificación	Timestamp of the last modification (nullable).
Versión	Version of the audit event record.
Estado	Internal lifecycle state of the event.
Estado	Outcome of the event (numeric enum).
TipoDeEvento	Identifier of the action performed.
EventSource	Identifier of the product or system emitting the event.
EventTarget	Identifier of the event category.
EventDetails	Embedded JSON with event-specific details (see below).
ServiceName	Human-readable name of the emitting service.
ClientInfo	Embedded JSON with IpAddress and IpCountry.
ActorId	Unique identifier of the actor.
ActorName	Display name of the actor.
ActorEmail	Email of the actor (nullable).
ActorDetails	Embedded JSON with metadata describing the actor.
IDDeOrganización	Organization identifier.
NombreDeLaOrganización	Organization name.
IDdeTenant	Tenant identifier (nullable for organization-level events).
NombreDeTenant	Tenant name (nullable for organization-level events).
Origen	Infrastructure or regional origin of the event.

EventDetails fields by service

The EventDetails field is a JSON string whose structure depends on the emitting service.

Identity / Authentication events:

Campo	Descripción
User.Id	Identifier of the user.
User.DisplayName	User display name.
User.Email	User email.
User.Type	User type (enum).
LoginMethod	Authentication method.
ClientId	OAuth client identifier.
Ámbitos	Granted or requested scopes.

Apps events:

Campo	Descripción
appId	Unique app identifier.
appName	Application name.
appType	Type of application.
2020.x	Application version.
Descripción	App description.
folderName	Folder containing the app.
isActionApp	Whether the app is an action app.
isPublicApp	Whether the app is publicly visible.

Integration Service events:

Campo	Descripción
ConnectionId	Integration connection identifier.
ConnectionName	Name of the connection.
Conector	Connector display name.
ConnectorKey	Unique connector key.

Admin / Policy events:

Campo	Descripción
PolicyId	Policy identifier.
PolicyName	Policy name.
CreatedPolicy	Policy creation metadata.
DeletedPolicy	Policy deletion metadata.
ModifiedFields	Fields changed during the update.

License Resource Manager events:

Campo	Descripción
ProductName	Licensed product name.
OldQuantity	Previous license quantity.
NewQuantity	Updated license quantity.
IDdeTenant	Affected tenant.
NombreDeTenant	Affected tenant name.
AdminName	Administrator who performed the change.

Data Service (DataFabric) events:

Campo	Descripción
EntityId	Identifier of the DataFabric entity.
NombreDeEntidad	Name of the entity.
IdDeRegistro	Identifier of the affected record.
changedProperties	Properties modified by the operation.
Marca de tiempo	DataFabric-specific event timestamp.

Example: Audit log event

{
  "LocalId": 158693,
  "State": 0,
  "LastModified": null,
  "Version": 1,
  "Id": "6cfeca16-2f9f-4ca1-8d06-be64003df865",
  "CreatedOn": "2026-01-10T16:15:46.5597482",
  "OrganizationId": "2511e08f-6fa5-40af-b4bb-ef3f077cb7a1",
  "OrganizationName": "2511e08f-6fa5-40af-b4bb-ef3f077cb7a1",
  "TenantId": null,
  "TenantName": null,
  "ActorId": "810e5c03-8284-47d4-a0b8-da238ee636e6",
  "ActorName": "System Administrator",
  "ActorEmail": null,
  "ActorDetails": "{\"Type\":1}",
  "EventType": "4ffc49e7-15b1-4c31-ba2d-a6dcdce716e7",
  "EventSource": "80c7a790-c3a8-4077-b4a4-fe6f9f947855",
  "EventTarget": "738aa382-1e14-48c8-a296-2868a1e5a22a",
  "EventDetails": "{\"User\":{\"Id\":\"1f8292e0-c86c-4bb3-b3bc-f9cebe546bbd\",\"DisplayName\":\"Test User\",\"Email\":\"[e-mail]\",\"Type\":0}}",
  "ServiceName": "Identity",
  "Status": 0,
  "ClientInfo": null,
  "Origin": "alp-wus2-01-platform"
}

---

OTEL Trace exports

Agent and Maestro traces are exported in OpenTelemetry (OTEL) format. Each execution generates a tree of spans — one root span per agent or Maestro run, with child spans for each LLM call, tool call, and guardrail evaluation.

OTEL span fields

OTEL Field	Descripción
traceId	Trace identifier. Groups all spans belonging to one execution.
spanId	Unique identifier for this span.
parentSpanId	Parent span identifier. Empty string for root spans.
name	Human-readable span name (for example, Agent run - googlesearch, LLM call).
kind	Span kind: SPAN_KIND_INTERNAL or SPAN_KIND_CLIENT.
startTimeUnixNano	Span start time in Unix nanoseconds.
endTimeUnixNano	Span end time in Unix nanoseconds.
status.code	Execution status: STATUS_CODE_OK or STATUS_CODE_ERROR.
status.message	Status message (empty string when no error).
attributes.*	Span attributes flattened using dot notation (see below).

UiPath attribute mapping

UiPath's internal trace fields map to OTEL attributes as follows:

Campo de UiPath	OTEL attribute	Notas
ID	span_id	Unique span identifier.
ID de seguimiento	trace_id	Trace identifier.
ParentId	parent_span_id	Null for root spans.
Nombre	name	Span name.
HoraDeInicio	start_time_unix_nano	Converted to Unix nanoseconds.
HoraDeFinalización	end_time_unix_nano	Converted to Unix nanoseconds.
Estado	status.code	1 = OK, 2 = ERROR.
Atributos	attributes	JSON string parsed into key-value pairs using dot notation.
SpanType, OrganizationId, TenantId, FolderKey, JobKey, ProcessKey, Source, VerbosityLevel	attributes.uipath.*	All UiPath metadata fields.

Span attribute types

The Attributes field in UiPath's internal schema contains a JSON string that is parsed and flattened into OTEL span attributes using dot notation. The structure depends on the span type.

agentRun attributes (attributes.type = "agentRun"):

Atributo	Descripción
type, agentId, agentName, agentVersion	Agent identity fields.
systemPrompt, userPrompt	Agent prompts.
inputSchema, outputSchema	Input and output schemas.
input, output, source	Execution inputs, outputs, and trigger source.
error	Error details, if present.

completion attributes (attributes.type = "completion"):

Atributo	Descripción
type, model	Span type and LLM model identifier.
settings.maxTokens, settings.temperature	LLM settings.
toolCalls	Array of tool calls made during completion.
usage.completionTokens, usage.promptTokens, usage.totalTokens	Token usage.
usage.isByoExecution, usage.executionDeploymentType, usage.isPiiMasked	Execution metadata.
error	Error details, if present.

toolCall attributes (attributes.type = "toolCall"):

Atributo	Descripción
type, callId, toolName	Tool call identity.
arguments, toolType	Call arguments and tool type.
Resultado	Tool call result.
error	Error details, if present.

toolGuardrailEvaluation attributes (attributes.type = "toolGuardrailEvaluation"):

Atributo	Descripción
type, guardrailName, guardrailDescription	Guardrail identity.
guardrailAction, details, action	Guardrail action and outcome.
arguments, result	Evaluation inputs and result.
severityLevel	Severity classification.
error	Error details, if present.

Export limits

Límite	Valor
Max individual attribute value	32 KB
Max total attributes per span	256 KB
Max OTLP batch size	~1 MB (protobuf)
File attachments	Metadata only (ID, filename, MIME type). File content is not exported.

Example: OTEL trace (four spans for one agent run)

[
  {
    "traceId": "10f78499ce774eaba05699f234e1c75d",
    "spanId": "a4bd5687817248fc",
    "parentSpanId": "",
    "name": "Agent run - googlesearch",
    "kind": "SPAN_KIND_INTERNAL",
    "startTimeUnixNano": "1728000235632009500",
    "endTimeUnixNano": "1728000248153231700",
    "attributes.type": "agentRun",
    "attributes.agentId": "80a61442-d3e1-4d10-966e-47e0bccc707d",
    "attributes.agentName": "googlesearch",
    "attributes.agentVersion": "1.0.0",
    "attributes.input.search_query": "google",
    "attributes.output.summary": "The search results for 'Google' include the official Google homepage.",
    "attributes.source": "playground",
    "attributes.uipath.organization_id": "9568beba-50a8-49d1-801e-f2d1711089fd",
    "attributes.uipath.tenant_id": "86011afe-5252-4e44-8805-b3430072d040",
    "attributes.uipath.span_type": "agentRun",
    "status.code": "STATUS_CODE_OK",
    "status.message": ""
  },
  {
    "traceId": "10f78499ce774eaba05699f234e1c75d",
    "spanId": "4c10aa5169c44a17",
    "parentSpanId": "a4bd5687817248fc",
    "name": "LLM call",
    "kind": "SPAN_KIND_CLIENT",
    "startTimeUnixNano": "1728000238084433000",
    "endTimeUnixNano": "1728000245772907200",
    "attributes.type": "completion",
    "attributes.model": "gpt-4o-2024-11-20",
    "attributes.settings.maxTokens": 16384,
    "attributes.settings.temperature": 0,
    "attributes.usage.completionTokens": 491,
    "attributes.usage.promptTokens": 1110,
    "attributes.usage.totalTokens": 1601,
    "attributes.uipath.span_type": "completion",
    "status.code": "STATUS_CODE_OK",
    "status.message": ""
  },
  {
    "traceId": "10f78499ce774eaba05699f234e1c75d",
    "spanId": "0fde078a923d484e",
    "parentSpanId": "4c10aa5169c44a17",
    "name": "LLM",
    "kind": "SPAN_KIND_CLIENT",
    "startTimeUnixNano": "1728000238979846800",
    "endTimeUnixNano": "1728000245095082400",
    "attributes.type": "completion",
    "attributes.model": "gpt-4o-2024-11-20",
    "attributes.uipath.span_type": "completion",
    "status.code": "STATUS_CODE_OK",
    "status.message": ""
  },
  {
    "traceId": "10f78499ce774eaba05699f234e1c75d",
    "spanId": "7fc828f5295d4788",
    "parentSpanId": "a4bd5687817248fc",
    "name": "Agent output",
    "kind": "SPAN_KIND_INTERNAL",
    "startTimeUnixNano": "1728000246820034400",
    "endTimeUnixNano": "1728000246820034400",
    "attributes.type": "agentOutput",
    "attributes.output.summary": "The search results for 'Google' include the official Google homepage.",
    "attributes.uipath.span_type": "agentOutput",
    "status.code": "STATUS_CODE_OK",
    "status.message": ""
  }
]