---
schema_version: "1"
id: c4d5cb5a83c88a5f9bcb83b6ef85cc364017d4260b11793971ad33b2984d736a
title: Report Event Type
collection: legacydeveloper
version: current
locale: en-us
portal_url: https://docs.salesforce.com/legacydeveloper/current/en-us/object_reference/sforce_api_objects_eventlogfile_report.md
canonical_url: https://developer.salesforce.com/docs/atlas.en-us.object_reference.meta/object_reference/sforce_api_objects_eventlogfile_report.htm
source_site: developer.salesforce.com
content_type: documentation
content_hash: 7765f07b604c37933f640f94edab684cda35893d670a051189ed2ba4f8fab891
description: Report events contain information about what happened when a user ran a report. This event type includes all activity that's in the Report Export event type, plus more. For example, it has user activity for reports exported as both Formatted Report and Details Only output.
---
# Report Event Type

Report events contain information about what happened when a user ran a report. This event type includes all activity that's in the Report Export event type, plus more. For example, it has user activity for reports exported as both Formatted Report and Details Only output.

![Note](https://developer.salesforce.com/docs/atlas.en-us.object_reference.meta/object_reference/images/icon_note.png)

#### Note

Exporting a report directly from the report result captures the event in both the Report and Report Export logs.

For details about event monitoring, see the [Trailhead Event Monitoring module](https://trailhead.salesforce.com/en/modules/event_monitoring/units/event_monitoring_intro "HTML (New Window)") or [REST API Developer’s Guide](https://developer.salesforce.com/docs/atlas.en-us.264.0.api_rest.meta/api_rest/using_resources_event_log_files.htm "HTML (New Window)").

## Fields

<table class="featureTable sort_table" summary=""><tbody class="tbody"><tr><td class="entry"><strong class="ph b">Field</strong></td><td class="entry"><strong class="ph b">Details</strong></td></tr><tr><td class="entry"><span class="keyword parmname">AVERAGE_ROW_SIZE</span></td><td class="entry"><dl class="dl detailList"><dt class="dt dlterm">Type</dt><dd class="dd">Number</dd><dt class="dt dlterm">Description</dt><dd class="dd">The average row size of all rows in the Report event, in bytes. A large average size, coupled with a high <span class="keyword parmname">ROW_COUNT</span>, can indicate that a user is downloading information for fraudulent purposes. For example, a salesperson who downloads all sales leads before departing for a competitor.</dd><dt class="dt dlterm">Example</dt><dd class="dd">700</dd></dl></td></tr><tr><td class="entry"><span class="keyword parmname">CLIENT_IP</span></td><td class="entry"><dl class="dl detailList"><dt class="dt dlterm">Type</dt><dd class="dd">String</dd><dt class="dt dlterm">Description</dt><dd class="dd">The IP address of the client that’s using Salesforce services. A Salesforce internal IP (such as a login from AppExchange) is shown as “Salesforce.com IP”.</dd><dd class="dd">For example: <samp class="codeph nolang">96.43.144.26</samp>.</dd></dl></td></tr><tr><td class="entry"><span class="keyword parmname">CPU_TIME</span></td><td class="entry"><dl class="dl detailList"><dt class="dt dlterm">Type</dt><dd class="dd">Number</dd><dt class="dt dlterm">Description</dt><dd class="dd">The CPU time in milliseconds used to complete the request. This field indicates the amount of activity taking place in the app server layer.</dd></dl></td></tr><tr><td class="entry"><span class="keyword parmname">DB_BLOCKS</span></td><td class="entry"><dl class="dl detailList"><dt class="dt dlterm">Type</dt><dd class="dd">Number</dd><dt class="dt dlterm">Description</dt><dd class="dd">Indicates how much activity is occurring in the database. A high value for this field suggests that adding indexes or filters on your queries would benefit performance.</dd></dl></td></tr><tr><td class="entry"><span class="keyword parmname">DB_CPU_TIME</span></td><td class="entry"><dl class="dl detailList"><dt class="dt dlterm">Type</dt><dd class="dd">Number</dd><dt class="dt dlterm">Description</dt><dd class="dd">The CPU time in milliseconds to complete the request. Indicates the amount of activity taking place in the database layer during the request.</dd></dl></td></tr><tr><td class="entry"><span class="keyword parmname">DB_TOTAL_TIME</span></td><td class="entry"><dl class="dl detailList"><dt class="dt dlterm">Type</dt><dd class="dd">Number</dd><dt class="dt dlterm">Description</dt><dd class="dd">The time in nanoseconds for a database round trip. Includes time spent in the JDBC driver, network to the database, and <span class="keyword parmname">DB_CPU_TIME</span>. Compare this field to <span class="keyword parmname">CPU_TIME</span> to determine whether performance issues are occurring in the database layer or in your own code.</dd></dl></td></tr><tr><td class="entry"><span class="keyword parmname">DISPLAY_TYPE</span></td><td class="entry"><dl class="dl detailList"><dt class="dt dlterm">Type</dt><dd class="dd">String</dd><dt class="dt dlterm">Description</dt><dd class="dd">The report display type, indicating the run mode of the report.</dd><dd class="dd">Possible values are:<ul class="ul bulletList"><li class="li"><samp class="codeph nolang">D</samp>—Dashboard</li><li class="li"><samp class="codeph nolang">S</samp>—Show Details</li><li class="li"><samp class="codeph nolang">H</samp>—Hide Details</li></ul></dd></dl></td></tr><tr><td class="entry"><span class="keyword parmname">ENTITY_NAME</span></td><td class="entry"><dl class="dl detailList"><dt class="dt dlterm">Type</dt><dd class="dd">String</dd><dt class="dt dlterm">Description</dt><dd class="dd">The name of the object affected by the trigger.</dd></dl></td></tr><tr><td class="entry"><span class="keyword parmname">EVENT_TYPE</span></td><td class="entry"><dl class="dl detailList"><dt class="dt dlterm">Type</dt><dd class="dd">String</dd><dt class="dt dlterm">Description</dt><dd class="dd"><span class="ph" id="event-type-desc"><a name="event-type-desc"></a>The type of event.</span> The value is always <samp class="codeph nolang">Report</samp>.</dd></dl></td></tr><tr><td class="entry"><span class="keyword parmname">LOGIN_KEY</span></td><td class="entry"><dl class="dl detailList"><dt class="dt dlterm">Type</dt><dd class="dd">String</dd><dt class="dt dlterm">Description</dt><dd class="dd">The string that ties together all events in a given user’s login session. It starts with a login event and ends with either a logout event or the user session expiring.</dd><dd class="dd">For example: <samp class="codeph nolang">GeJCsym5eyvtEK2I</samp>.</dd></dl></td></tr><tr><td class="entry"><span class="keyword parmname">NUMBER_BUCKETS</span></td><td class="entry"><dl class="dl detailList"><dt class="dt dlterm">Type</dt><dd class="dd">Number</dd><dt class="dt dlterm">Description</dt><dd class="dd">The number of buckets that were used in the report.</dd></dl></td></tr><tr><td class="entry"><span class="keyword parmname">NUMBER_COLUMNS</span></td><td class="entry"><dl class="dl detailList"><dt class="dt dlterm">Type</dt><dd class="dd">Number</dd><dt class="dt dlterm">Description</dt><dd class="dd">The number of columns in the report.</dd></dl></td></tr><tr><td class="entry"><span class="keyword parmname">NUMBER_EXCEPTION_FILTERS</span></td><td class="entry"><dl class="dl detailList"><dt class="dt dlterm">Type</dt><dd class="dd">Number</dd><dt class="dt dlterm">Description</dt><dd class="dd">The number of exception filters that are used in the report.</dd></dl></td></tr><tr><td class="entry"><span class="keyword parmname">ORGANIZATION_ID</span></td><td class="entry"><dl class="dl detailList"><dt class="dt dlterm">Type</dt><dd class="dd">Id</dd><dt class="dt dlterm">Description</dt><dd class="dd">The 15-character ID of the organization.</dd><dd class="dd">For example: <samp class="codeph nolang">00D000000000123</samp>.</dd></dl></td></tr><tr><td class="entry"><span class="keyword parmname">ORIGIN</span></td><td class="entry"><dl class="dl detailList"><dt class="dt dlterm">Type</dt><dd class="dd">String</dd><dt class="dt dlterm">Description</dt><dd class="dd">The context in which the report executed, such as from a UI (Classic, Lightning, Mobile), through an API (synchronous, asynchronous, Apex), or through a dashboard.</dd><dt class="dt dlterm">Possible Values</dt><dd class="dd"><ul class="ul bulletList"><li class="li"><samp class="codeph nolang">ReportOpenedFromMobileDashboard</samp>: Report executed when a user clicked a dashboard component on a mobile device and drilled down to a report.</li><li class="li"><samp class="codeph nolang">DashboardComponentUpdated</samp>: Report executed when a user refreshed a dashboard component.</li><li class="li"><samp class="codeph nolang">DashboardComponentPreviewed</samp>: Report executed from a Lightning dashboard component preview.</li><li class="li"><samp class="codeph nolang">ReportRunUsingSynchronousApi</samp>: Report executed from a synchronous API.</li><li class="li"><samp class="codeph nolang">ReportRunUsingAsynchronousApi</samp>: Report executed from an asynchronous API.</li><li class="li"><samp class="codeph nolang">ReportRunUsingApexSynchronousApi</samp>: Report executed from the synchronous Apex API.</li><li class="li"><samp class="codeph nolang">ReportRunUsingApexAsynchronousApi</samp>: Report executed from the asynchronous Apex API.</li><li class="li"><samp class="codeph nolang">ReportExported</samp>: Report executed from a printable view or report export that was not asynchronous nor an API export.</li><li class="li"><samp class="codeph nolang">ReportRunFromClassic</samp>: Report executed from the Run Report option of Salesforce Classic.</li><li class="li"><samp class="codeph nolang">ReportRunFromMobile</samp>: Report executed from the Run Report option of the mobile Salesforce app.</li><li class="li"><samp class="codeph nolang">ReportRunFromLightning</samp>: Report executed from the Run option in Lightning Experience from a non-mobile browser.</li><li class="li"><samp class="codeph nolang">ReportRunFromRestApi</samp>: Report executed from REST API.</li><li class="li"><samp class="codeph nolang">ReportPreviewed</samp>: Report executed when a user got preview results while using the report builder.</li><li class="li"><samp class="codeph nolang">ReportScheduled</samp>: Report was scheduled.</li><li class="li"><samp class="codeph nolang">ProbeQuery</samp>: Report executed from a probe query.</li><li class="li"><samp class="codeph nolang">ReportRunFromReportingSnapshot</samp>: Report executed through Snapshot Analytics.</li><li class="li"><samp class="codeph nolang">ReportExportedAsynchronously</samp>: Report was exported asynchronously.</li><li class="li"><samp class="codeph nolang">ReportExportedUsingExcelConnector</samp>: Report was exported using the Excel connector.</li><li class="li"><samp class="codeph nolang">ChartRenderedOnVisualforcePage</samp>: Report executed from a rendered chart on a VisualForce Page.</li><li class="li"><samp class="codeph nolang">ChartRenderedInEmbeddedAnalyticsApp</samp>: Report executed from a rendered chart in an embedded Analytics app.</li><li class="li"><samp class="codeph nolang">ReportRunAndNotificationSent</samp>: Report executed through the notifications API.</li><li class="li"><samp class="codeph nolang">ChartRenderedOnHomePage</samp>: Report executed from a rendered chart on the home page.</li><li class="li"><samp class="codeph nolang">ReportResultsAddedToWaveTrending</samp>: Report executed when a user trended a report in CRM Analytics.</li><li class="li"><samp class="codeph nolang">ReportAddedToCampaign</samp>: Report was added from an Add to Campaign action.</li><li class="li"><samp class="codeph nolang">ReportResultsAddedToEinsteinDiscovery</samp>: Report executed synchronously from Einstein Discovery.</li><li class="li"><samp class="codeph nolang">Unknown</samp>: Report execution origin is unknown.</li><li class="li"><samp class="codeph nolang">Test</samp>: Report execution resulted from a test.</li></ul></dd></dl></td></tr><tr><td class="entry"><span class="keyword parmname">RENDERING_TYPE</span></td><td class="entry"><dl class="dl detailList"><dt class="dt dlterm">Type</dt><dd class="dd">String</dd><dt class="dt dlterm">Description</dt><dd class="dd">Describes the format of the report output in Salesforce Classic. If the report was exported in Lightning Experience, this field is blank.</dd><dt class="dt dlterm">Possible Values</dt><dd class="dd"><ul class="ul bulletList"><li class="li"><samp class="codeph nolang">W</samp>: Web (HTML)</li><li class="li"><samp class="codeph nolang">E</samp>: Email</li><li class="li"><samp class="codeph nolang">P</samp>: Printable</li><li class="li"><samp class="codeph nolang">X</samp>: Excel</li><li class="li"><samp class="codeph nolang">C</samp>: Comma-separated values (CSV)</li><li class="li"><samp class="codeph nolang">J</samp>: JavaScript Object Notation (JSON)</li><li class="li"><samp class="codeph nolang">D</samp>: Dummy data</li></ul></dd></dl></td></tr><tr><td class="entry"><span class="keyword parmname">REPORT_ID</span></td><td class="entry"><dl class="dl detailList"><dt class="dt dlterm">Type</dt><dd class="dd">Id</dd><dt class="dt dlterm">Description</dt><dd class="dd">The 15-character ID of the report that was run.</dd></dl></td></tr><tr><td class="entry"><span class="keyword parmname">REPORT_ID_DERIVED</span></td><td class="entry"><dl class="dl detailList"><dt class="dt dlterm">Type</dt><dd class="dd">Id</dd><dt class="dt dlterm">Description</dt><dd class="dd">The 18-character case insensitive ID of the report that was run.</dd></dl></td></tr><tr><td class="entry"><span class="keyword parmname">REQUEST_ID</span></td><td class="entry"><dl class="dl detailList"><dt class="dt dlterm">Type</dt><dd class="dd">String</dd><dt class="dt dlterm">Description</dt><dd class="dd"><span class="ph" id="request-id-desc"><a name="request-id-desc"></a>The unique ID of a single transaction. A transaction can contain one or more events. Each event in a given transaction has the same <span class="keyword parmname">REQUEST_ID</span>.</span></dd><dd class="dd">For example: <samp class="codeph nolang">3nWgxWbDKWWDIk0FKfF5DV</samp>.</dd></dl></td></tr><tr><td class="entry"><span class="keyword parmname">REQUEST_STATUS</span></td><td class="entry"><dl class="dl detailList"><dt class="dt dlterm">Type</dt><dd class="dd">String</dd><dt class="dt dlterm">Description</dt><dd class="dd">The status of the request for a page view or user interface action.</dd><dd class="dd">For example:<a name="ul_wgy_1rf_4q"></a><ul class="ul bulletList" id="ul_wgy_1rf_4q"><li class="li"><samp class="codeph nolang">S</samp>—Success. Salesforce handled the request successfully. If an Apex controller throws an exception, this status is also returned.</li><li class="li"><samp class="codeph nolang">F</samp>—Failure. Typically 4xx or 5xx HTTP codes, such as no permission to view page, page took too long to render, page is read-only.</li><li class="li"><samp class="codeph nolang">U</samp>—Undefined</li><li class="li"><samp class="codeph nolang">A</samp>—Authorization Error</li><li class="li"><samp class="codeph nolang">R</samp>—Redirect. Typically a 3xx HTTP code, possibly initiated by an Apex controller in a Visualforce page.</li><li class="li"><samp class="codeph nolang">N</samp>—Not Found. 404 error.</li></ul>This field can have a blank value.</dd></dl></td></tr><tr><td class="entry"><span class="keyword parmname">ROW_COUNT</span></td><td class="entry"><dl class="dl detailList"><dt class="dt dlterm">Type</dt><dd class="dd">Number</dd><dt class="dt dlterm">Description</dt><dd class="dd">The number of rows that were processed in the Report event. High row counts, coupled with a high <span class="keyword parmname">AVERAGE_ROW_SIZE</span>, can indicate that a user is downloading information for fraudulent purposes. For example, a salesperson who downloads all sales leads before departing for a competitor.</dd><dt class="dt dlterm">Example</dt><dd class="dd">150</dd></dl></td></tr><tr><td class="entry"><span class="keyword parmname">RUN_TIME</span></td><td class="entry"><dl class="dl detailList"><dt class="dt dlterm">Type</dt><dd class="dd">Number</dd><dt class="dt dlterm">Description</dt><dd class="dd">The amount of time that the request took in milliseconds.</dd></dl></td></tr><tr><td class="entry"><span class="keyword parmname">SESSION_KEY</span></td><td class="entry"><dl class="dl detailList"><dt class="dt dlterm">Type</dt><dd class="dd">String</dd><dt class="dt dlterm">Description</dt><dd class="dd">The user’s unique session ID. You can use this value to identify all user events within a session. When a user logs out and logs in again, a new session is started.</dd><dd class="dd">For example: <samp class="codeph nolang">d7DEq/ANa7nNZZVD</samp>.</dd></dl></td></tr><tr><td class="entry"><span class="keyword parmname">SORT</span></td><td class="entry"><dl class="dl detailList"><dt class="dt dlterm">Type</dt><dd class="dd">String</dd><dt class="dt dlterm">Description</dt><dd class="dd">The sort column and order that was used in the report.</dd></dl></td></tr><tr><td class="entry"><span class="keyword parmname">TIMESTAMP</span></td><td class="entry"><dl class="dl detailList"><dt class="dt dlterm">Type</dt><dd class="dd">String</dd><dt class="dt dlterm">Description</dt><dd class="dd">The access time of Salesforce services in GMT.</dd><dd class="dd">For example: <samp class="codeph nolang">20130715233322.670</samp>.</dd></dl></td></tr><tr><td class="entry"><span class="keyword parmname">TIMESTAMP_DERIVED</span></td><td class="entry"><dl class="dl detailList"><dt class="dt dlterm">Type</dt><dd class="dd">DateTime</dd><dt class="dt dlterm">Description</dt><dd class="dd">The access time of Salesforce services in ISO8601-compatible format (<samp class="codeph nolang">YYYY-MM-DDTHH:MM:SS.sssZ</samp>).</dd><dd class="dd">For example: <samp class="codeph nolang">2015-07-27T11:32:59.555Z</samp>. Timezone is GMT.</dd></dl></td></tr><tr><td class="entry"><span class="keyword parmname">UI_NUMBER_COLUMNS</span></td><td class="entry"><dl class="dl detailList"><dt class="dt dlterm">Type</dt><dd class="dd">Number</dd><dt class="dt dlterm">Description</dt><dd class="dd">The number of columns in the report. The fields that have multiple components (for example, addresses) are considered as a single column.</dd></dl></td></tr><tr><td class="entry"><span class="keyword parmname">URI</span></td><td class="entry"><dl class="dl detailList"><dt class="dt dlterm">Type</dt><dd class="dd">String</dd><dt class="dt dlterm">Description</dt><dd class="dd">The URI of the page that’s receiving the request.</dd><dd class="dd">For example: <span class="keyword parmname">/home/home.jsp</span>.</dd></dl></td></tr><tr><td class="entry"><span class="keyword parmname">URI_ID_DERIVED</span></td><td class="entry"><dl class="dl detailList"><dt class="dt dlterm">Type</dt><dd class="dd">ID</dd><dt class="dt dlterm">Description</dt><dd class="dd">The 18-character case insensitive ID of the URI of the page that’s receiving the request.</dd></dl></td></tr><tr><td class="entry"><span class="keyword parmname">USER_ID</span></td><td class="entry"><dl class="dl detailList"><dt class="dt dlterm">Type</dt><dd class="dd">Id</dd><dt class="dt dlterm">Description</dt><dd class="dd">The 15-character ID of the user who’s using Salesforce services through the UI or the API.</dd><dd class="dd">For example: <samp class="codeph nolang">00530000009M943</samp></dd></dl></td></tr><tr><td class="entry"><span class="keyword parmname">USER_ID_DERIVED</span></td><td class="entry"><dl class="dl detailList"><dt class="dt dlterm">Type</dt><dd class="dd">Id</dd><dt class="dt dlterm">Description</dt><dd class="dd">The 18-character case insensitive ID of the user who’s using Salesforce services through the UI or the API.</dd><dd class="dd">For example: <samp class="codeph nolang">00590000000I1SNIA0</samp>.</dd></dl></td></tr><tr><td class="entry"><span class="keyword parmname">USER_TYPE</span></td><td class="entry"><dl class="dl detailList"><dt class="dt dlterm">Type</dt><dd class="dd">String</dd><dt class="dt dlterm">Description</dt><dd class="dd">The category of user license.</dd><dd class="dd">Possible values are:<a name="user-type-values"></a><ul class="ul bulletList" id="user-type-values"><li class="li"><samp class="codeph nolang">CsnOnly</samp>—Users whose access to the application is limited to Chatter. This user type includes Chatter Free and Chatter moderator users.</li><li class="li"><samp class="codeph nolang">CspLitePortal</samp>—CSP Lite Portal license. Users whose access is limited because they’re organization customers and access the application through a customer portal or an Experience Cloud site.</li><li class="li"><samp class="codeph nolang">CustomerSuccess</samp>—Customer Success license. Users whose access is limited because they’re organization customers and access the application through a customer portal.</li><li class="li"><samp class="codeph nolang">Guest</samp>—Users whose access is limited so that your customers can view and interact with your site without logging in.</li><li class="li"><samp class="codeph nolang">PowerCustomerSuccess</samp>—Power Customer Success license. Users whose access is limited because they’re organization customers and access the application through a customer portal. Users with this license type can view and edit data they directly own or data owned by or shared with users below them in the customer portal role hierarchy.</li><li class="li"><samp class="codeph nolang">PowerPartner</samp>—Power Partner license. Users whose access is limited because they’re partners and typically access the application through a partner portal or site.</li><li class="li"><samp class="codeph nolang">SelfService</samp>—Users whose access is limited because they’re organization customers and access the application through a self-service portal.</li><li class="li"><samp class="codeph nolang">Standard</samp>—Standard user license. This user type also includes Salesforce Platform and Salesforce Platform One user licenses, and admins for this org.</li></ul></dd></dl></td></tr></tbody></table>

## Usage

**Example: Identify Large Report Exports by User**

Get Report event type data from the EventLogFile object using REST:

/services/data/v40.0/query?q=SELECT+Id+,+EventType+,+LogFile+,+LogDate+,+LogFileLength+FROM+EventLogFile+WHERE+
    LogDate+>+Yesterday+AND+EventType+=+'Report'

After you download the report data to a ReportData database table, query it and filter on reports that were exported with high row counts and size:

SELECT USER\_ID FROM ReportData WHERE (RENDERING\_TYPE=C OR RENDERING\_TYPE=X OR RENDERING\_TYPE=P) AND ROW\_COUNT>150000 AND AVERAGE\_ROW\_SIZE>1500

#### See Also

- [EventLogFile Supported Event Types](https://developer.salesforce.com/docs/atlas.en-us.object_reference.meta/object_reference/sforce_api_objects_eventlogfile_supportedeventtypes.htm "The EventType field in the EventLogFile object supports these events. Some common fields, such as CPU_TIME and RUN_TIME, can have null or zero values depending on how the events are generated for a given feature. Sometimes, three quotation marks appear around event data containing special characters in the CSV file. The third quotation mark is necessary for tools and applications to parse the field data at the correct field value boundary.")
- [EventLogFile](https://developer.salesforce.com/docs/atlas.en-us.object_reference.meta/object_reference/sforce_api_objects_eventlogfile.htm "Represents event log files generated by Event Monitoring. Use event log file data to analyze usage trends and user behavior in your Salesforce org. This object is available in API version 32.0 and later. The Interval and Sequence fields are available only in API version 37.0 and later.")