uip or audit-logs

uip or audit-logs lists the tenant's audit log — the record of who did what and when. Audit entries track changes to users, processes, assets, queues, jobs, folders, machines, roles, settings, schedules, and other entities. Use it for compliance review, incident investigation, or to watch a specific user's activity.

Synopsis

uip or audit-logs list [options]

The verb honors the global options (--output, --output-filter, --log-level, --log-file). Exit codes follow the standard contract.

Verbs

Verb	Propósito
list	List audit entries, filtered by component, action, user, or time range. Optionally export to CSV.

uip or audit-logs list

List audit log entries. Filters compose with AND semantics. With --export, the logs are exported server-side to CSV and downloaded when ready.

Opciones

Corto	Largo	Valor	Predeterminado	Descripción
-t	--tenant	name	session default	Override the tenant.
—	--component	text	—	Filter by component (for example, Users, Assets, Processes, Queues, Jobs, Folders, Machines, Roles, Settings, Schedules).
—	--action	text	—	Filter by action (for example, Create, Update, Delete, StartJob, StopJob, Upload, Download).
—	--user	nombre de usuario	—	Exact-match on username.
—	--created-after	ISO 8601	—	Entries on or after this date.
—	--created-before	ISO 8601	—	Entries strictly before this date.
-l	--limit	Número	50	Page size.
—	--offset	Número	0	Skip count.
—	--order-by	Campo	ExecutionTime desc	OData sort expression.
—	--export	flag	off	Export matching entries to CSV via the server-side export API.
-o	--output	Ruta	audit-logs-export.csv	Output CSV path. Only with --export.

Ejemplos

# Most recent audit entries across the tenant
uip or audit-logs list

# Filter to the Users component
uip or audit-logs list --component Users --limit 100

# Everything one user did in a window
uip or audit-logs list --user [e-mail] \
    --created-after 2026-04-01 --created-before 2026-04-08

# Export to CSV
uip or audit-logs list --component Jobs --export -o ./jobs-audit.csv

Data shape (--output json)

Inline mode:

{
  "Code": "AuditLogList",
  "Data": [
    {
      "serviceName": "UiPath.Orchestrator.Web.Api.OData.Controllers.UsersController",
      "methodName": "Post",
      "executionTime": "2025-04-15T09:10:00Z",
      "action": "Create",
      "component": "Users",
      "displayName": "[e-mail]",
      "entityId": 1001,
      "operationText": "User [e-mail] created user [e-mail]",
      "userName": "[e-mail]",
      "userType": "DirectoryUser",
      "entities": [
        {
          "auditLogId": 1000001,
          "customData": "{\"Id\":1001,\"UserName\":\"jane.doe\"}",
          "entityId": 1001,
          "entityName": "User",
          "action": "Create",
          "id": 2000001
        }
      ],
      "userId": 42,
      "userIsDeleted": false,
      "userIsActive": true,
      "id": 1000001
    }
  ]
}

With --export, the Code is AuditLogsExported and the payload is:

{
  "Code": "AuditLogsExported",
  "Data": {
    "FileName": "jobs-audit.csv",
    "Size": 52318,
    "ExportId": 4711
  }
}

Related commands

• uip or jobs — the Jobs component of audit logs records job lifecycle events.
• uip or users — resolve usernames seen in audit entries.

Ver también

• Global options — --output, --output-filter, --log-level, --log-file.
• Exit codes — standard exit-code contract.