Sensitive spans fields

  • Reference
  • Published Apr 27, 2026

The following fields, as well as any fields listed in the table with the prefix supportability.span_start., are considered sensitive and will be dropped by default for all spans when querying. For example, if client.ip is listed in the table, then supportability.span_start.client.ip will also be considered sensitive.

AttributeTypeDescriptionExamples
client.ipipAddressexperimental
The IP address of the client that makes the request. This can be IPv4 or IPv6.
Tags: sensitive-spans sensitive-user-events
194.232.104.141; 2a01:468:1000:9::140
db.connection_stringstringexperimental
The connection string for a database connection.
Tags: sensitive-spans
jdbc:dynamodb:Access Key=XXX;Secret Key=XXX;Domain=amazonaws.com;Region
db.query.parametersrecord[]experimental
The query parameters used in db.query.text represented as a key and value map. For database systems without named keys, the map key is the string representation of the index starting with 0. Several database requests may get aggregated into a single span. Each entry in the array holds the bind parameters for one database request.
Tags: sensitive-spans
[{'name': 'paul', 'age': '23'}, {'name': 'mary', 'age': '32'}]; [{'0': 'paul', '1': '23'}, {'0': 'mary', '1': '32'}]
http.request.header.__key__stringstable
HTTP request headers, __key__ being the lowercase HTTP header name, for example, "http.request.header.accept-encoding". The value is a string. If multiple headers have the same name or multiple header values, the values will be comma-separated into a single string.
Tags: sensitive-spans
https://www.foo.bar/; gzip, deflate, br; 1.2.3.4, 1.2.3.5
request_attribute.__attribute_name__arraystable
Contains the request scoped reconciled values of the attribute named __attribute_name__ defined by the request attribute configuration. The data type of the value depends on the request attribute definition.
Tags: sensitive-spans
42; Platinum; ['Product A', 'Product B']; ['Special Offer', '1702']
url.fullstringstable
Absolute URL describing a network resource according to RFC3986.
Tags: sensitive-spans
https://www.foo.bar/docs/search?q=OpenTelemetry#SemConv
url.querystringstable
The URI query component.
Tags: sensitive-spans
q=OpenTelemetry