Data Export data model

Data Export sends data in two formats depending on the data source selected:

• Event-based (JSON) — discrete events emitted when something happens in UiPath (a job changes state, a queue item is processed, an audit action is recorded). Delivered to Azure Event Hub or AWS SQS.
• OTEL Trace — hierarchical spans representing agent and Maestro execution traces in OpenTelemetry format. Delivered to Arize, Databricks, or any OTLP (OpenTelemetry Protocol)-compatible endpoint.

Event-based (JSON) exports

Orchestrator Events

Orchestrator emits events for Jobs, Queue Items, Machines, and Robot Logs. Each event includes a common envelope plus an entity-specific body.

Champs communs

All Orchestrator events include the following fields:

Champ	Description
TypeÉvénement	String identifying the event type (for example, job.created, queueitem.added).
SchemaVersion	Schema version identifier.
Horodatage	Horodatage UTC de l'événement.
TenantKey	Tenant identifier.
NomLocataire	Tenant display name.
FolderKey	Folder identifier.
NomDossier	Nom complet du dossier.
FullFolderPath	Full folder path.

Job events

Emitted on: job.created, job.started, job.stopped, job.pending, job.completed, job.faulted, job.stopping, job.terminating

Champ	Saisie de texte	Description
Clé (Key)	GUID	Unique job identifier.
Heure de création	Horodatage	Job creation time.
StartTime	Horodatage	Execution start time.
EndTime	Horodatage	Execution end time.
État (State)	Chaîne de caractères (string)	Job status: Pending, Running, Stopping, Terminating, Faulted, Successful, Stopped, Suspended, Resumed.
ProcessName	Chaîne de caractères (string)	Source package name.
DisplayName	Chaîne de caractères (string)	Display name in Orchestrator.
Nom du Robot (RobotName)	Chaîne de caractères (string)	Executing robot identifier.
Nom de la machine hôte	Chaîne de caractères (string)	Execution machine name.

Queue item events

Emitted on: queueitem.added, queueItem.deferred, queueItem.reviewStatusChanged, queueItem.retried, queueItem.updated, queueItem.transactionAbandoned, queueItem.transactionCompleted, queueItem.transactionFailed, queueItem.transactionRetried, queueItem.transactionStarted

Champ	Saisie de texte	Description
Clé (Key)	GUID	Queue item identifier.
QueueDefinitionId	Numérique	Queue numeric ID.
État (Status)	Chaîne de caractères (string)	Item status: New, InProgress, Failed, Successful, Abandoned, Retried, Deleted, Unknown.
État de révision (ReviewStatus)	Chaîne de caractères (string)	Review classification: None, InReview, Verified, Retried, Unknown.
Priorité (Priority)	Chaîne de caractères (string)	Item priority: High, Normal, Low, Unknown.
DueDate	DateTime	Processing deadline.
Heure de création	DateTime	Creation timestamp.
Démarrer le traitement (StartProcessing)	DateTime	Processing start time.
Terminer le traitement (EndProcessing)	DateTime	Processing completion time.
DeferDate	DateTime	Earliest available processing time.
SecondsInPreviousAttempts	Numérique	Duration of the previous attempt in seconds.
Nombre de nouvelles tentatives (RetryNumber)	Numérique	Number of processing attempts.
Progression (Progress)	Chaîne de caractères (string)	Business flow progress.
Données d'analyse	Chaîne de caractères (string)	Analytics property key-value pairs.
Sortie	Chaîne de caractères (string)	Output data from the Set Transaction Status activity.
Données spécifiques (SpecificData)	Chaîne de caractères (string)	Custom data from the Specific Content property or Add Queue Item activity.
CreatorJobId	Numérique	Creating job identifier.
ExecutorJobId	Numérique	Executing job identifier.
ProcessExceptionReason	Chaîne de caractères (string)	Failure summary.
ProcessExceptionDetails	Chaîne de caractères (string)	Failure details.
ProcessExceptionType	Chaîne de caractères (string)	Error type: ApplicationException, BusinessException, None.

The Queue object embedded in each event includes: Key, Name, Description, MaxNumberOfRetries, EnforceUniqueReference, SlaInMinutes, RiskSlaInMinutes.

Remarque :

SpecificData, SpecificContent, and Output are not included in queueItem.deferred and queueItem.reviewStatusChanged events.

Machine events

Emitted on: machine.created, machine.updated, machine.deleted, machine.assign, machine.unassign

Champ	Saisie de texte	Description
Id de la machine	Numérique	Machine numeric ID.
MachineKey	GUID	Machine identifier.
Nom de machine (Machine Name)	Chaîne de caractères (string)	Machine custom name.
AutomationCloudSlots	Numérique	Reserved runtime slots.
HeadlessSlots	Numérique	Headless mode slots.
NonProductionSlots	Numérique	Non-production environment slots.
UnattendedSlots	Numérique	Unattended execution slots.

Machine session events (machineSession.status) include:

Champ	Saisie de texte	Description
MachineKey	GUID	Machine identifier.
Nom de machine (Machine Name)	Chaîne de caractères (string)	Machine custom name.
Nom de la machine hôte	Chaîne de caractères (string)	Host system name.
Nom d'utilisateur du service	Chaîne de caractères (string)	Robot service account.
Statut de la machine	Chaîne de caractères (string)	Status: Available, Busy, Disconnected, Unknown.
Horodatage	DateTime	Event timestamp.
IsUnresponsive	Booléen	Whether the connection is unresponsive.

Robot log events

Emitted on: robotlog

Champ	Saisie de texte	Description
Message	Chaîne de caractères (string)	Log content.
Niveau (Level)	Chaîne de caractères (string)	Severity: Trace, Info, Warn, Error, Fatal.
TypeJournal	Chaîne de caractères (string)	Category: User, Default, Error, Business, ExecutionStep, Info, Security, Technical.
Horodatage	DateTime	Generation timestamp.
JobId	GUID	Job key.
ProcessName	Chaîne de caractères (string)	Executing process name.
Version du processus	Chaîne de caractères (string)	Process version.
Nom du Robot (RobotName)	Chaîne de caractères (string)	Robot identifier.
Id de la machine	Numérique	Machine numeric ID.
MachineKey	GUID	Machine identifier.
Nom de machine (Machine Name)	Chaîne de caractères (string)	Machine name.
Nom de la machine hôte	Chaîne de caractères (string)	Host machine name (session logs only).
Identité Windows	Chaîne de caractères (string)	Acting user account.
InitiéPar (initiatedBy)	Chaîne de caractères (string)	Execution source: Assistant, Studio, StudioX, Orchestrator, CommandLine, RobotAPI.
FileName	Chaîne de caractères (string)	Executed .xaml file name.
InfoActivité	JSON	Activity metadata: DisplayName, State, Activity, Arguments.
Champs personnalisés	JSON	Custom fields added via the AddLogFields activity.
QueueName	Chaîne de caractères (string)	Source queue name (queue processing only).
Id de la transaction	GUID	Transaction key (queue processing only).
transactionState	Chaîne de caractères (string)	Started, Ended, Postponed (queue processing only).
transactionStatus	Chaîne de caractères (string)	Start, Success, Failed, BusinessException, ApplicationException (queue processing only).
Délai d'exécution de la transaction (Transaction Execution Time)	Numérique	Execution duration in seconds (queue processing only).
totalExecutionTimeInSeconds	Numérique	Total execution duration (queue processing only).
queueItemPriority	Chaîne de caractères (string)	High, Normal, Low (queue transaction end logs only).
queueItemReviewStatus	Chaîne de caractères (string)	InReview, Verified, Reported, Retried (queue transaction end logs only).
ProcessingExceptionReason	Chaîne de caractères (string)	Exception reason (queue transaction end logs only).
Type d'exception de traitement	Chaîne de caractères (string)	ApplicationException or BusinessException (queue transaction end logs only).

---

Maestro Events

Maestro emits events for Process Runs, Element Runs, and Incidents.

Standard fields

All Maestro events include the following fields:

Champ	Description
OrganizationId	Identifier of the organization emitting the event.
TenantId	Identifier of the tenant emitting the event.
FolderKey	Folder or workspace identifier.
ProcessKey	Identifier of the process definition.
InstanceId	Identifier of the process instance.
RunId	Identifier of the process run.
SpanType	Maestro event type: Incident, ProcessRun, ElementRun, InstanceOperation.
État (Status)	Current lifecycle state of the event.
EventUniqueId	Globally unique identifier of the emitted event.
EventTimeUtc	Timestamp when the event was emitted.
TraceAttributes	Optional trace-level metadata (nullable).
SpanAttributes	Stringified JSON of additional span-specific attributes.

Incident fields

Champ	Description
ElementId	Element where the incident occurred.
ElementRunId	Element run associated with the incident.
IncidentUpdateTimeUtc	Timestamp when the incident was last updated.
Commentaire (Comment)	Optional comment associated with the incident.
ErrorCode	Error code for the incident.
ErrorMessage	Short error message.
ErrorDetails	Detailed error information.
DebugMode	Debug mode state when the incident occurred.

Process run fields

Champ	Description
StartTimeUtc	Process run start time in UTC.
SpanName	Human-readable name of the span or event.
Identifiant du traçage	Distributed trace identifier for correlation.
SpanId	Span identifier for this process run.
ParentSpanId	Parent span identifier (nullable for root spans).
PackageId	Package identifier.
PackageKey	Package key, typically includes version.
PackageVersion	Version du package.
Nom de la version	Human-readable release name.
ExternalId	External correlation identifier.
Source	Trigger source of the run (for example, Manual).
DebugModeType	Debug mode configuration.
CreatorUserKey	User that initiated the run (nullable).
CaseInstanceId	Case instance identifier (nullable).
CaseManagementMetadata	Case management metadata (nullable).

Element run fields

Champ	Description
StartTimeUtc	Element execution start time in UTC.
EndTimeUtc	Element execution end time in UTC.
SpanName	Human-readable name of the span or event.
Identifiant du traçage	Distributed trace identifier for correlation.
SpanId	Span identifier for this element run.
ParentSpanId	Parent span identifier (nullable).
Variables	Structured variables captured at element execution.
VariablesJson	Variables serialized as JSON.
ElementRun.ElementId	Identifier of the element.
ElementRun.ElementName	Display name of the element.
ElementRun.ElementType	Element type.
ElementRun.ElementExtensionType	Extension type (nullable).
ElementRun.ElementRunId	Element run identifier.
ElementRun.IncomingFlowId	Incoming flow identifier.
ElementRun.IncomingFlowIds	Incoming flow identifiers array (nullable).
ElementRun.CaseStageElementId	Case stage element identifier (nullable).
ElementRun.CaseManagementMetadata	Case metadata at element level (nullable).

Example: Element run event

{
  "ElementRun": {
    "ProcessRun": {
      "ProcessInstance": {
        "OrganizationId": "85d09b09-268b-4748-abfd-738402122e7d",
        "TenantId": "1777e378-59ea-4c6a-a6bf-c2e88fb6d2a1",
        "FolderKey": "cb0b27ed-0211-4a77-81a7-00530f85c67a",
        "PackageId": "Trace.Test.agentic.Agentic.Process",
        "PackageKey": "Trace.Test.agentic.Agentic.Process:1.0.0",
        "PackageVersion": "1.0.0",
        "ReleaseName": "Agentic Process",
        "ProcessKey": "ee34bc76-4989-487d-8cdc-0bc6ea87fae4",
        "InstanceId": "aafa3baa-dd48-46b9-bfea-2cf1acd999c3",
        "CaseInstanceId": null,
        "ExternalId": "44777039",
        "Source": "Manual",
        "DebugModeType": "None",
        "CreatorUserKey": null
      },
      "RunId": "aafa3baa-dd48-46b9-bfea-2cf1acd999c3",
      "CaseManagementMetadata": null
    },
    "ElementId": "__Action=Pending__",
    "ElementName": "",
    "ElementType": "__InstanceAction__",
    "ElementExtensionType": null,
    "ElementRunId": "4e410977-6373-4c02-ba81-1699ac94bdc6",
    "IncomingFlowId": "",
    "IncomingFlowIds": null,
    "CaseStageElementId": null,
    "CaseManagementMetadata": null
  },
  "StartTimeUtc": "2026-01-06T21:15:42.7806522Z",
  "EndTimeUtc": "2026-01-06T21:15:42.7806522Z",
  "Status": "Pending",
  "Variables": {},
  "VariablesJson": "{}",
  "SpanName": "Instance Created",
  "TraceId": "aafa3baa-dd48-46b9-bfea-2cf1acd999c3",
  "SpanId": "4e410977-6373-4c02-ba81-1699ac94bdc6",
  "ParentSpanId": null,
  "SpanType": "InstanceOperation",
  "EventUniqueId": "d0195ac7-3770-44f8-8d88-a74b53b6218a",
  "EventTimeUtc": "2026-01-06T21:15:42.7806522Z",
  "TraceAttributes": null,
  "SpanAttributes": "{\"spanType\":\"InstanceOperation\",\"operationType\":\"InstanceCreated\",\"comment\":\"\",\"userId\":\"00000000-0000-0000-0000-000000000000\"}"
}

---

Audit Log Events

Audit log exports support both tenant-level and organization-level audit events.

Tenant-level sources:

Identity and access: Identity, OMS, KMS, Licensing, AuthZ, Routing

Products and services: Integration Service, Data Service, Test Manager, Automation Ops, Apps, Document Understanding

Organization-level sources: Organization-scoped policy and user management events.

Standard fields

Champ	Description
Id	Globally unique identifier of the audit event.
LocalId	Internal sequential identifier for ordering.
Date de création	Timestamp when the event was created.
Dernière modification	Timestamp of the last modification (nullable).
Version	Version of the audit event record.
État (State)	Internal lifecycle state of the event.
État (Status)	Outcome of the event (numeric enum).
TypeÉvénement	Identifier of the action performed.
EventSource	Identifier of the product or system emitting the event.
EventTarget	Identifier of the event category.
EventDetails	Embedded JSON with event-specific details (see below).
ServiceName	Human-readable name of the emitting service.
ClientInfo	Embedded JSON with IpAddress and IpCountry.
ActorId	Unique identifier of the actor.
ActorName	Display name of the actor.
ActorEmail	Email of the actor (nullable).
ActorDetails	Embedded JSON with metadata describing the actor.
OrganizationId	Organization identifier.
NomOrganisation	Organization name.
TenantId	Tenant identifier (nullable for organization-level events).
NomLocataire	Tenant name (nullable for organization-level events).
Origine	Infrastructure or regional origin of the event.

EventDetails fields by service

The EventDetails field is a JSON string whose structure depends on the emitting service.

Identity / Authentication events:

Champ	Description
User.Id	Identifier of the user.
User.DisplayName	User display name.
User.Email	User email.
User.Type	User type (enum).
LoginMethod	Authentication method.
ID de client	OAuth client identifier.
Étendues	Granted or requested scopes.

Apps events:

Champ	Description
appId	Unique app identifier.
appName	Application name.
appType	Type of application.
version	Application version.
Description	App description.
folderName	Folder containing the app.
isActionApp	Whether the app is an action app.
isPublicApp	Whether the app is publicly visible.

Integration Service events:

Champ	Description
ConnectionId	Integration connection identifier.
ConnectionName	Name of the connection.
Connecteur	Connector display name.
ConnectorKey	Unique connector key.

Admin / Policy events:

Champ	Description
PolicyId	Policy identifier.
PolicyName	Policy name.
CreatedPolicy	Policy creation metadata.
DeletedPolicy	Policy deletion metadata.
ModifiedFields	Fields changed during the update.

License Resource Manager events:

Champ	Description
ProductName	Licensed product name.
OldQuantity	Previous license quantity.
NewQuantity	Updated license quantity.
TenantId	Affected tenant.
NomLocataire	Affected tenant name.
AdminName	Administrator who performed the change.

Data Service (DataFabric) events:

Champ	Description
EntityId	Identifier of the DataFabric entity.
EntityName (Nom de l'entité)	Name of the entity.
RecordId (ID de l'enregistrement)	Identifier of the affected record.
changedProperties	Properties modified by the operation.
Horodatage	DataFabric-specific event timestamp.

Example: Audit log event

{
  "LocalId": 158693,
  "State": 0,
  "LastModified": null,
  "Version": 1,
  "Id": "6cfeca16-2f9f-4ca1-8d06-be64003df865",
  "CreatedOn": "2026-01-10T16:15:46.5597482",
  "OrganizationId": "2511e08f-6fa5-40af-b4bb-ef3f077cb7a1",
  "OrganizationName": "2511e08f-6fa5-40af-b4bb-ef3f077cb7a1",
  "TenantId": null,
  "TenantName": null,
  "ActorId": "810e5c03-8284-47d4-a0b8-da238ee636e6",
  "ActorName": "System Administrator",
  "ActorEmail": null,
  "ActorDetails": "{\"Type\":1}",
  "EventType": "4ffc49e7-15b1-4c31-ba2d-a6dcdce716e7",
  "EventSource": "80c7a790-c3a8-4077-b4a4-fe6f9f947855",
  "EventTarget": "738aa382-1e14-48c8-a296-2868a1e5a22a",
  "EventDetails": "{\"User\":{\"Id\":\"1f8292e0-c86c-4bb3-b3bc-f9cebe546bbd\",\"DisplayName\":\"Test User\",\"Email\":\"[e-mail]\",\"Type\":0}}",
  "ServiceName": "Identity",
  "Status": 0,
  "ClientInfo": null,
  "Origin": "alp-wus2-01-platform"
}

---

OTEL Trace exports

Agent and Maestro traces are exported in OpenTelemetry (OTEL) format. Each execution generates a tree of spans — one root span per agent or Maestro run, with child spans for each LLM call, tool call, and guardrail evaluation.

OTEL span fields

OTEL Field	Description
traceId	Trace identifier. Groups all spans belonging to one execution.
spanId	Unique identifier for this span.
parentSpanId	Parent span identifier. Empty string for root spans.
name	Human-readable span name (for example, Agent run - googlesearch, LLM call).
kind	Span kind: SPAN_KIND_INTERNAL or SPAN_KIND_CLIENT.
startTimeUnixNano	Span start time in Unix nanoseconds.
endTimeUnixNano	Span end time in Unix nanoseconds.
status.code	Execution status: STATUS_CODE_OK or STATUS_CODE_ERROR.
status.message	Status message (empty string when no error).
attributes.*	Span attributes flattened using dot notation (see below).

UiPath attribute mapping

UiPath's internal trace fields map to OTEL attributes as follows:

Champ UiPath	OTEL attribute	Remarques
Id	span_id	Unique span identifier.
Identifiant du traçage	trace_id	Trace identifier.
ParentId	parent_span_id	Null for root spans.
Nom	name	Span name.
StartTime	start_time_unix_nano	Converted to Unix nanoseconds.
EndTime	end_time_unix_nano	Converted to Unix nanoseconds.
État (Status)	status.code	1 = OK, 2 = ERROR.
Attributs	attributes	JSON string parsed into key-value pairs using dot notation.
SpanType, OrganizationId, TenantId, FolderKey, JobKey, ProcessKey, Source, VerbosityLevel	attributes.uipath.*	All UiPath metadata fields.

Span attribute types

The Attributes field in UiPath's internal schema contains a JSON string that is parsed and flattened into OTEL span attributes using dot notation. The structure depends on the span type.

agentRun attributes (attributes.type = "agentRun"):

Attribut	Description
type, agentId, agentName, agentVersion	Agent identity fields.
systemPrompt, userPrompt	Agent prompts.
inputSchema, outputSchema	Input and output schemas.
input, output, source	Execution inputs, outputs, and trigger source.
error	Error details, if present.

completion attributes (attributes.type = "completion"):

Attribut	Description
type, model	Span type and LLM model identifier.
settings.maxTokens, settings.temperature	LLM settings.
toolCalls	Array of tool calls made during completion.
usage.completionTokens, usage.promptTokens, usage.totalTokens	Token usage.
usage.isByoExecution, usage.executionDeploymentType, usage.isPiiMasked	Execution metadata.
error	Error details, if present.

toolCall attributes (attributes.type = "toolCall"):

Attribut	Description
type, callId, toolName	Tool call identity.
arguments, toolType	Call arguments and tool type.
Résultat	Tool call result.
error	Error details, if present.

toolGuardrailEvaluation attributes (attributes.type = "toolGuardrailEvaluation"):

Attribut	Description
type, guardrailName, guardrailDescription	Guardrail identity.
guardrailAction, details, action	Guardrail action and outcome.
arguments, result	Evaluation inputs and result.
severityLevel	Severity classification.
error	Error details, if present.

Export limits

Limite	Valeur (Value)
Max individual attribute value	32 KB
Max total attributes per span	256 KB
Max OTLP batch size	~1 MB (protobuf)
File attachments	Metadata only (ID, filename, MIME type). File content is not exported.

Example: OTEL trace (four spans for one agent run)

[
  {
    "traceId": "10f78499ce774eaba05699f234e1c75d",
    "spanId": "a4bd5687817248fc",
    "parentSpanId": "",
    "name": "Agent run - googlesearch",
    "kind": "SPAN_KIND_INTERNAL",
    "startTimeUnixNano": "1728000235632009500",
    "endTimeUnixNano": "1728000248153231700",
    "attributes.type": "agentRun",
    "attributes.agentId": "80a61442-d3e1-4d10-966e-47e0bccc707d",
    "attributes.agentName": "googlesearch",
    "attributes.agentVersion": "1.0.0",
    "attributes.input.search_query": "google",
    "attributes.output.summary": "The search results for 'Google' include the official Google homepage.",
    "attributes.source": "playground",
    "attributes.uipath.organization_id": "9568beba-50a8-49d1-801e-f2d1711089fd",
    "attributes.uipath.tenant_id": "86011afe-5252-4e44-8805-b3430072d040",
    "attributes.uipath.span_type": "agentRun",
    "status.code": "STATUS_CODE_OK",
    "status.message": ""
  },
  {
    "traceId": "10f78499ce774eaba05699f234e1c75d",
    "spanId": "4c10aa5169c44a17",
    "parentSpanId": "a4bd5687817248fc",
    "name": "LLM call",
    "kind": "SPAN_KIND_CLIENT",
    "startTimeUnixNano": "1728000238084433000",
    "endTimeUnixNano": "1728000245772907200",
    "attributes.type": "completion",
    "attributes.model": "gpt-4o-2024-11-20",
    "attributes.settings.maxTokens": 16384,
    "attributes.settings.temperature": 0,
    "attributes.usage.completionTokens": 491,
    "attributes.usage.promptTokens": 1110,
    "attributes.usage.totalTokens": 1601,
    "attributes.uipath.span_type": "completion",
    "status.code": "STATUS_CODE_OK",
    "status.message": ""
  },
  {
    "traceId": "10f78499ce774eaba05699f234e1c75d",
    "spanId": "0fde078a923d484e",
    "parentSpanId": "4c10aa5169c44a17",
    "name": "LLM",
    "kind": "SPAN_KIND_CLIENT",
    "startTimeUnixNano": "1728000238979846800",
    "endTimeUnixNano": "1728000245095082400",
    "attributes.type": "completion",
    "attributes.model": "gpt-4o-2024-11-20",
    "attributes.uipath.span_type": "completion",
    "status.code": "STATUS_CODE_OK",
    "status.message": ""
  },
  {
    "traceId": "10f78499ce774eaba05699f234e1c75d",
    "spanId": "7fc828f5295d4788",
    "parentSpanId": "a4bd5687817248fc",
    "name": "Agent output",
    "kind": "SPAN_KIND_INTERNAL",
    "startTimeUnixNano": "1728000246820034400",
    "endTimeUnixNano": "1728000246820034400",
    "attributes.type": "agentOutput",
    "attributes.output.summary": "The search results for 'Google' include the official Google homepage.",
    "attributes.uipath.span_type": "agentOutput",
    "status.code": "STATUS_CODE_OK",
    "status.message": ""
  }
]