Data Export data model

Data Export sends data in two formats depending on the data source selected:

• Event-based (JSON) — discrete events emitted when something happens in UiPath (a job changes state, a queue item is processed, an audit action is recorded). Delivered to Azure Event Hub or AWS SQS.
• OTEL Trace — hierarchical spans representing agent and Maestro execution traces in OpenTelemetry format. Delivered to Arize, Databricks, or any OTLP (OpenTelemetry Protocol)-compatible endpoint.

Event-based (JSON) exports

Orchestrator Events

Orchestrator emits events for Jobs, Queue Items, Machines, and Robot Logs. Each event includes a common envelope plus an entity-specific body.

Campos comuns

All Orchestrator events include the following fields:

Campo	Description
TipoDeEvento	String identifying the event type (for example, job.created, queueitem.added).
SchemaVersion	Schema version identifier.
Carimbo de data/hora	Carimbo de data/hora UTC do evento.
TenantKey	Tenant identifier.
NomeDoTenant	Tenant display name.
FolderKey	Folder identifier.
NomeDaPasta	Nome de exibição da pasta.
FullFolderPath	Full folder path.

Job events

Emitted on: job.created, job.started, job.stopped, job.pending, job.completed, job.faulted, job.stopping, job.terminating

Campo	Tipo	Description
Chave	Guid	Unique job identifier.
Hora de Criação	Carimbo de data/hora	Job creation time.
StartTime	Carimbo de data/hora	Execution start time.
EndTime	Carimbo de data/hora	Execution end time.
Estado	String	Job status: Pending, Running, Stopping, Terminating, Faulted, Successful, Stopped, Suspended, Resumed.
ProcessName	String	Source package name.
NomeDeExibição	String	Display name in Orchestrator.
Nome do Robô	String	Executing robot identifier.
Nome da Máquina do Host	String	Execution machine name.

Queue item events

Emitted on: queueitem.added, queueItem.deferred, queueItem.reviewStatusChanged, queueItem.retried, queueItem.updated, queueItem.transactionAbandoned, queueItem.transactionCompleted, queueItem.transactionFailed, queueItem.transactionRetried, queueItem.transactionStarted

Campo	Tipo	Description
Chave	Guid	Queue item identifier.
IdDeDefiniçãoDeFila	Número	Queue numeric ID.
Status	String	Item status: New, InProgress, Failed, Successful, Abandoned, Retried, Deleted, Unknown.
ReviewStatus	String	Review classification: None, InReview, Verified, Retried, Unknown.
Prioridade	String	Item priority: High, Normal, Low, Unknown.
DueDate	DateTime	Processing deadline.
Hora de Criação	DateTime	Creation timestamp.
StartProcessing	DateTime	Processing start time.
Encerrar Processamento	DateTime	Processing completion time.
DeferDate	DateTime	Earliest available processing time.
SegundosEmAnteriorTentativa	Número	Duration of the previous attempt in seconds.
Número da Tentativa	Número	Number of processing attempts.
Progresso	String	Business flow progress.
Dados de Análise	String	Analytics property key-value pairs.
Saída	String	Output data from the Set Transaction Status activity.
Dados Específicos	String	Custom data from the Specific Content property or Add Queue Item activity.
ID do Trabalho do Criador	Número	Creating job identifier.
ID do Trabalho do Executador	Número	Executing job identifier.
ProcessExceptionReason	String	Failure summary.
ProcessExceptionDetails	String	Failure details.
ProcessExceptionType	String	Error type: ApplicationException, BusinessException, None.

The Queue object embedded in each event includes: Key, Name, Description, MaxNumberOfRetries, EnforceUniqueReference, SlaInMinutes, RiskSlaInMinutes.

Observação:

SpecificData, SpecificContent, and Output are not included in queueItem.deferred and queueItem.reviewStatusChanged events.

Machine events

Emitted on: machine.created, machine.updated, machine.deleted, machine.assign, machine.unassign

Campo	Tipo	Description
ID da Máquina	Número	Machine numeric ID.
MachineKey	Guid	Machine identifier.
Nome da máquina	String	Machine custom name.
AutomationCloudSlots	Número	Reserved runtime slots.
HeadlessSlots	Número	Headless mode slots.
NonProductionSlots	Número	Non-production environment slots.
UnattendedSlots	Número	Unattended execution slots.

Machine session events (machineSession.status) include:

Campo	Tipo	Description
MachineKey	Guid	Machine identifier.
Nome da máquina	String	Machine custom name.
Nome da Máquina do Host	String	Host system name.
Nome de Usuário do Serviço	String	Robot service account.
Status da Máquina	String	Status: Available, Busy, Disconnected, Unknown.
Carimbo de data/hora	DateTime	Event timestamp.
IsUnresponsive	Booleano	Whether the connection is unresponsive.

Robot log events

Emitted on: robotlog

Campo	Tipo	Description
Mensagem	String	Log content.
Nível	String	Severity: Trace, Info, Warn, Error, Fatal.
TipoDeLog	String	Category: User, Default, Error, Business, ExecutionStep, Info, Security, Technical.
Carimbo de data/hora	DateTime	Generation timestamp.
JobId	Guid	Job key.
ProcessName	String	Executing process name.
Versão do Processo	String	Process version.
Nome do Robô	String	Robot identifier.
ID da Máquina	Número	Machine numeric ID.
MachineKey	Guid	Machine identifier.
Nome da máquina	String	Machine name.
Nome da Máquina do Host	String	Host machine name (session logs only).
Identidade do Windows	String	Acting user account.
initiatedBy	String	Execution source: Assistant, Studio, StudioX, Orchestrator, CommandLine, RobotAPI.
NomeDoArquivo	String	Executed .xaml file name.
InformaçõesDaAtividade	JSON	Activity metadata: DisplayName, State, Activity, Arguments.
Custom Fields	JSON	Custom fields added via the AddLogFields activity.
QueueName	String	Source queue name (queue processing only).
ID da Transação	Guid	Transaction key (queue processing only).
transactionState	String	Started, Ended, Postponed (queue processing only).
transactionStatus	String	Start, Success, Failed, BusinessException, ApplicationException (queue processing only).
Tempo de Execução da Transação	Número	Execution duration in seconds (queue processing only).
TempoTotalDeExecuçãoEmSegundos	Número	Total execution duration (queue processing only).
queueItemPriority	String	High, Normal, Low (queue transaction end logs only).
StatusDeRevisãoDeItemDaFila	String	InReview, Verified, Reported, Retried (queue transaction end logs only).
ProcessingExceptionReason	String	Exception reason (queue transaction end logs only).
Tipo da Exceção de Processamento	String	ApplicationException or BusinessException (queue transaction end logs only).

---

Maestro Events

Maestro emits events for Process Runs, Element Runs, and Incidents.

Standard fields

All Maestro events include the following fields:

Campo	Description
OrganizationId	Identifier of the organization emitting the event.
TenantId	Identifier of the tenant emitting the event.
FolderKey	Folder or workspace identifier.
ProcessKey	Identifier of the process definition.
InstanceId	Identifier of the process instance.
RunId	Identifier of the process run.
SpanType	Maestro event type: Incident, ProcessRun, ElementRun, InstanceOperation.
Status	Current lifecycle state of the event.
EventUniqueId	Globally unique identifier of the emitted event.
EventTimeUtc	Timestamp when the event was emitted.
TraceAttributes	Optional trace-level metadata (nullable).
SpanAttributes	Stringified JSON of additional span-specific attributes.

Incident fields

Campo	Description
ElementId	Element where the incident occurred.
ElementRunId	Element run associated with the incident.
IncidentUpdateTimeUtc	Timestamp when the incident was last updated.
Comentar	Optional comment associated with the incident.
ErrorCode	Error code for the incident.
ErrorMessage	Short error message.
ErrorDetails	Detailed error information.
DebugMode	Debug mode state when the incident occurred.

Process run fields

Campo	Description
StartTimeUtc	Process run start time in UTC.
SpanName	Human-readable name of the span or event.
ID do trace	Distributed trace identifier for correlation.
SpanId	Span identifier for this process run.
ParentSpanId	Parent span identifier (nullable for root spans).
PackageId	Package identifier.
PackageKey	Package key, typically includes version.
PackageVersion	Versão do pacote.
Nome da versão	Human-readable release name.
ExternalId	External correlation identifier.
Origem	Trigger source of the run (for example, Manual).
DebugModeType	Debug mode configuration.
CreatorUserKey	User that initiated the run (nullable).
CaseInstanceId	Case instance identifier (nullable).
CaseManagementMetadata	Case management metadata (nullable).

Element run fields

Campo	Description
StartTimeUtc	Element execution start time in UTC.
EndTimeUtc	Element execution end time in UTC.
SpanName	Human-readable name of the span or event.
ID do trace	Distributed trace identifier for correlation.
SpanId	Span identifier for this element run.
ParentSpanId	Parent span identifier (nullable).
Variáveis	Structured variables captured at element execution.
VariablesJson	Variables serialized as JSON.
ElementRun.ElementId	Identifier of the element.
ElementRun.ElementName	Display name of the element.
ElementRun.ElementType	Element type.
ElementRun.ElementExtensionType	Extension type (nullable).
ElementRun.ElementRunId	Element run identifier.
ElementRun.IncomingFlowId	Incoming flow identifier.
ElementRun.IncomingFlowIds	Incoming flow identifiers array (nullable).
ElementRun.CaseStageElementId	Case stage element identifier (nullable).
ElementRun.CaseManagementMetadata	Case metadata at element level (nullable).

Example: Element run event

{
  "ElementRun": {
    "ProcessRun": {
      "ProcessInstance": {
        "OrganizationId": "85d09b09-268b-4748-abfd-738402122e7d",
        "TenantId": "1777e378-59ea-4c6a-a6bf-c2e88fb6d2a1",
        "FolderKey": "cb0b27ed-0211-4a77-81a7-00530f85c67a",
        "PackageId": "Trace.Test.agentic.Agentic.Process",
        "PackageKey": "Trace.Test.agentic.Agentic.Process:1.0.0",
        "PackageVersion": "1.0.0",
        "ReleaseName": "Agentic Process",
        "ProcessKey": "ee34bc76-4989-487d-8cdc-0bc6ea87fae4",
        "InstanceId": "aafa3baa-dd48-46b9-bfea-2cf1acd999c3",
        "CaseInstanceId": null,
        "ExternalId": "44777039",
        "Source": "Manual",
        "DebugModeType": "None",
        "CreatorUserKey": null
      },
      "RunId": "aafa3baa-dd48-46b9-bfea-2cf1acd999c3",
      "CaseManagementMetadata": null
    },
    "ElementId": "__Action=Pending__",
    "ElementName": "",
    "ElementType": "__InstanceAction__",
    "ElementExtensionType": null,
    "ElementRunId": "4e410977-6373-4c02-ba81-1699ac94bdc6",
    "IncomingFlowId": "",
    "IncomingFlowIds": null,
    "CaseStageElementId": null,
    "CaseManagementMetadata": null
  },
  "StartTimeUtc": "2026-01-06T21:15:42.7806522Z",
  "EndTimeUtc": "2026-01-06T21:15:42.7806522Z",
  "Status": "Pending",
  "Variables": {},
  "VariablesJson": "{}",
  "SpanName": "Instance Created",
  "TraceId": "aafa3baa-dd48-46b9-bfea-2cf1acd999c3",
  "SpanId": "4e410977-6373-4c02-ba81-1699ac94bdc6",
  "ParentSpanId": null,
  "SpanType": "InstanceOperation",
  "EventUniqueId": "d0195ac7-3770-44f8-8d88-a74b53b6218a",
  "EventTimeUtc": "2026-01-06T21:15:42.7806522Z",
  "TraceAttributes": null,
  "SpanAttributes": "{\"spanType\":\"InstanceOperation\",\"operationType\":\"InstanceCreated\",\"comment\":\"\",\"userId\":\"00000000-0000-0000-0000-000000000000\"}"
}

---

Audit Log Events

Audit log exports support both tenant-level and organization-level audit events.

Tenant-level sources:

Identity and access: Identity, OMS, KMS, Licensing, AuthZ, Routing

Products and services: Integration Service, Data Service, Test Manager, Automation Ops, Apps, Document Understanding

Organization-level sources: Organization-scoped policy and user management events.

Standard fields

Campo	Description
Id	Globally unique identifier of the audit event.
LocalId	Internal sequential identifier for ordering.
Criado Em	Timestamp when the event was created.
Última Modificação	Timestamp of the last modification (nullable).
Versão	Version of the audit event record.
Estado	Internal lifecycle state of the event.
Status	Outcome of the event (numeric enum).
TipoDeEvento	Identifier of the action performed.
EventSource	Identifier of the product or system emitting the event.
EventTarget	Identifier of the event category.
EventDetails	Embedded JSON with event-specific details (see below).
ServiceName	Human-readable name of the emitting service.
ClientInfo	Embedded JSON with IpAddress and IpCountry.
ActorId	Unique identifier of the actor.
ActorName	Display name of the actor.
ActorEmail	Email of the actor (nullable).
ActorDetails	Embedded JSON with metadata describing the actor.
OrganizationId	Organization identifier.
NomeDaOrganização	Organization name.
TenantId	Tenant identifier (nullable for organization-level events).
NomeDoTenant	Tenant name (nullable for organization-level events).
Origem	Infrastructure or regional origin of the event.

EventDetails fields by service

The EventDetails field is a JSON string whose structure depends on the emitting service.

Identity / Authentication events:

Campo	Description
User.Id	Identifier of the user.
User.DisplayName	User display name.
User.Email	User email.
User.Type	User type (enum).
LoginMethod	Authentication method.
ClientId	OAuth client identifier.
Escopos	Granted or requested scopes.

Apps events:

Campo	Description
appId	Unique app identifier.
appName	Application name.
appType	Type of application.
2019.x	Application version.
Descrição	App description.
folderName	Folder containing the app.
isActionApp	Whether the app is an action app.
isPublicApp	Whether the app is publicly visible.

Integration Service events:

Campo	Description
ConnectionId	Integration connection identifier.
ConnectionName	Name of the connection.
Conector	Connector display name.
ConnectorKey	Unique connector key.

Admin / Policy events:

Campo	Description
PolicyId	Policy identifier.
PolicyName	Policy name.
CreatedPolicy	Policy creation metadata.
DeletedPolicy	Policy deletion metadata.
ModifiedFields	Fields changed during the update.

License Resource Manager events:

Campo	Description
ProductName	Licensed product name.
OldQuantity	Previous license quantity.
NewQuantity	Updated license quantity.
TenantId	Affected tenant.
NomeDoTenant	Affected tenant name.
AdminName	Administrator who performed the change.

Data Service (DataFabric) events:

Campo	Description
EntityId	Identifier of the DataFabric entity.
NomedaEntidade	Name of the entity.
IdDoRegistro	Identifier of the affected record.
changedProperties	Properties modified by the operation.
Carimbo de data/hora	DataFabric-specific event timestamp.

Example: Audit log event

{
  "LocalId": 158693,
  "State": 0,
  "LastModified": null,
  "Version": 1,
  "Id": "6cfeca16-2f9f-4ca1-8d06-be64003df865",
  "CreatedOn": "2026-01-10T16:15:46.5597482",
  "OrganizationId": "2511e08f-6fa5-40af-b4bb-ef3f077cb7a1",
  "OrganizationName": "2511e08f-6fa5-40af-b4bb-ef3f077cb7a1",
  "TenantId": null,
  "TenantName": null,
  "ActorId": "810e5c03-8284-47d4-a0b8-da238ee636e6",
  "ActorName": "System Administrator",
  "ActorEmail": null,
  "ActorDetails": "{\"Type\":1}",
  "EventType": "4ffc49e7-15b1-4c31-ba2d-a6dcdce716e7",
  "EventSource": "80c7a790-c3a8-4077-b4a4-fe6f9f947855",
  "EventTarget": "738aa382-1e14-48c8-a296-2868a1e5a22a",
  "EventDetails": "{\"User\":{\"Id\":\"1f8292e0-c86c-4bb3-b3bc-f9cebe546bbd\",\"DisplayName\":\"Test User\",\"Email\":\"[e-mail]\",\"Type\":0}}",
  "ServiceName": "Identity",
  "Status": 0,
  "ClientInfo": null,
  "Origin": "alp-wus2-01-platform"
}

---

OTEL Trace exports

Agent and Maestro traces are exported in OpenTelemetry (OTEL) format. Each execution generates a tree of spans — one root span per agent or Maestro run, with child spans for each LLM call, tool call, and guardrail evaluation.

OTEL span fields

OTEL Field	Description
traceId	Trace identifier. Groups all spans belonging to one execution.
spanId	Unique identifier for this span.
parentSpanId	Parent span identifier. Empty string for root spans.
name	Human-readable span name (for example, Agent run - googlesearch, LLM call).
kind	Span kind: SPAN_KIND_INTERNAL or SPAN_KIND_CLIENT.
startTimeUnixNano	Span start time in Unix nanoseconds.
endTimeUnixNano	Span end time in Unix nanoseconds.
status.code	Execution status: STATUS_CODE_OK or STATUS_CODE_ERROR.
status.message	Status message (empty string when no error).
attributes.*	Span attributes flattened using dot notation (see below).

UiPath attribute mapping

UiPath's internal trace fields map to OTEL attributes as follows:

Campo do UiPath	OTEL attribute	Observações
Id	span_id	Unique span identifier.
ID do trace	trace_id	Trace identifier.
ParentId	parent_span_id	Null for root spans.
Name	name	Span name.
StartTime	start_time_unix_nano	Converted to Unix nanoseconds.
EndTime	end_time_unix_nano	Converted to Unix nanoseconds.
Status	status.code	1 = OK, 2 = ERROR.
Atributos	attributes	JSON string parsed into key-value pairs using dot notation.
SpanType, OrganizationId, TenantId, FolderKey, JobKey, ProcessKey, Source, VerbosityLevel	attributes.uipath.*	All UiPath metadata fields.

Span attribute types

The Attributes field in UiPath's internal schema contains a JSON string that is parsed and flattened into OTEL span attributes using dot notation. The structure depends on the span type.

agentRun attributes (attributes.type = "agentRun"):

Atributo	Description
type, agentId, agentName, agentVersion	Agent identity fields.
systemPrompt, userPrompt	Agent prompts.
inputSchema, outputSchema	Input and output schemas.
input, output, source	Execution inputs, outputs, and trigger source.
error	Error details, if present.

completion attributes (attributes.type = "completion"):

Atributo	Description
type, model	Span type and LLM model identifier.
settings.maxTokens, settings.temperature	LLM settings.
toolCalls	Array of tool calls made during completion.
usage.completionTokens, usage.promptTokens, usage.totalTokens	Token usage.
usage.isByoExecution, usage.executionDeploymentType, usage.isPiiMasked	Execution metadata.
error	Error details, if present.

toolCall attributes (attributes.type = "toolCall"):

Atributo	Description
type, callId, toolName	Tool call identity.
arguments, toolType	Call arguments and tool type.
Resultado	Tool call result.
error	Error details, if present.

toolGuardrailEvaluation attributes (attributes.type = "toolGuardrailEvaluation"):

Atributo	Description
type, guardrailName, guardrailDescription	Guardrail identity.
guardrailAction, details, action	Guardrail action and outcome.
arguments, result	Evaluation inputs and result.
severityLevel	Severity classification.
error	Error details, if present.

Export limits

Limite	Valor
Max individual attribute value	32 KB
Max total attributes per span	256 KB
Max OTLP batch size	~1 MB (protobuf)
File attachments	Metadata only (ID, filename, MIME type). File content is not exported.

Example: OTEL trace (four spans for one agent run)

[
  {
    "traceId": "10f78499ce774eaba05699f234e1c75d",
    "spanId": "a4bd5687817248fc",
    "parentSpanId": "",
    "name": "Agent run - googlesearch",
    "kind": "SPAN_KIND_INTERNAL",
    "startTimeUnixNano": "1728000235632009500",
    "endTimeUnixNano": "1728000248153231700",
    "attributes.type": "agentRun",
    "attributes.agentId": "80a61442-d3e1-4d10-966e-47e0bccc707d",
    "attributes.agentName": "googlesearch",
    "attributes.agentVersion": "1.0.0",
    "attributes.input.search_query": "google",
    "attributes.output.summary": "The search results for 'Google' include the official Google homepage.",
    "attributes.source": "playground",
    "attributes.uipath.organization_id": "9568beba-50a8-49d1-801e-f2d1711089fd",
    "attributes.uipath.tenant_id": "86011afe-5252-4e44-8805-b3430072d040",
    "attributes.uipath.span_type": "agentRun",
    "status.code": "STATUS_CODE_OK",
    "status.message": ""
  },
  {
    "traceId": "10f78499ce774eaba05699f234e1c75d",
    "spanId": "4c10aa5169c44a17",
    "parentSpanId": "a4bd5687817248fc",
    "name": "LLM call",
    "kind": "SPAN_KIND_CLIENT",
    "startTimeUnixNano": "1728000238084433000",
    "endTimeUnixNano": "1728000245772907200",
    "attributes.type": "completion",
    "attributes.model": "gpt-4o-2024-11-20",
    "attributes.settings.maxTokens": 16384,
    "attributes.settings.temperature": 0,
    "attributes.usage.completionTokens": 491,
    "attributes.usage.promptTokens": 1110,
    "attributes.usage.totalTokens": 1601,
    "attributes.uipath.span_type": "completion",
    "status.code": "STATUS_CODE_OK",
    "status.message": ""
  },
  {
    "traceId": "10f78499ce774eaba05699f234e1c75d",
    "spanId": "0fde078a923d484e",
    "parentSpanId": "4c10aa5169c44a17",
    "name": "LLM",
    "kind": "SPAN_KIND_CLIENT",
    "startTimeUnixNano": "1728000238979846800",
    "endTimeUnixNano": "1728000245095082400",
    "attributes.type": "completion",
    "attributes.model": "gpt-4o-2024-11-20",
    "attributes.uipath.span_type": "completion",
    "status.code": "STATUS_CODE_OK",
    "status.message": ""
  },
  {
    "traceId": "10f78499ce774eaba05699f234e1c75d",
    "spanId": "7fc828f5295d4788",
    "parentSpanId": "a4bd5687817248fc",
    "name": "Agent output",
    "kind": "SPAN_KIND_INTERNAL",
    "startTimeUnixNano": "1728000246820034400",
    "endTimeUnixNano": "1728000246820034400",
    "attributes.type": "agentOutput",
    "attributes.output.summary": "The search results for 'Google' include the official Google homepage.",
    "attributes.uipath.span_type": "agentOutput",
    "status.code": "STATUS_CODE_OK",
    "status.message": ""
  }
]