---
title: telegraf secrets get
description: >
  The `telegraf secrets get` command retrieves the value of a secret from the
  specified secret store.
menu:
  telegraf_v1_ref:
    parent: telegraf secrets
weight: 301
---

The `telegraf secrets get` command retrieves the value of a secret from the
specified secret store.

{{% note %}}
This command requires your configuration file that contains the secret store
definitions you want to access. If the `--config` or `--config-directory` flags
are not included in the command, Telegraf checks the
[default configuration file location](/telegraf/v1/configuration/#configuration-file-locations).
{{% /note %}}

Use [`telegraf secrets list`](/telegraf/v1/commands/secrets/list/) to get the
IDs of available secret stores and the available secret keys.

If you haven't configured a secret store, use
[`telegraf plugins secretstores`](/telegraf/v1/commands/plugins/secretstores/)
to list available secret store plugins.
View secret store plugin configuration documentation in the
[Telegraf GitHub repository](https://github.com/influxdata/telegraf/tree/master/plugins/secretstores).

## Usage

```sh
telegraf [global-flags] secrets get [flags] <SECRET_STORE_ID> <SECRET_KEY>
```

## Arguments

| Argument            | Description                                        |
| :------------------ | :------------------------------------------------- |
| **SECRET_STORE_ID** | ID of the secret store to retrieve the secret from |
| **SECRET_KEY**      | Key of the secret to retrieve                      |

## Flags

| Flag |          | Description       |
| :--- | :------- | :---------------- |
| `-h` | `--help` | Show command help |

{{% caption %}}
_Also see [Telegraf global flags](/telegraf/v1/commands/#telegraf-global-flags)._
{{% /caption %}}

## Examples

- [Retrieve a secret using the default configuration location](#retrieve-a-secret-using-the-default-configuration-location)
- [Retrieve a secret using a non-default configuration location](#retrieve-a-secret-using-a-non-default-configuration-location)

In the examples below, replace the following:

- {{% code-placeholder-key %}}`SECRET_STORE_ID`{{% /code-placeholder-key %}}:
  The ID of the secret store to retrieve the secret from.
- {{% code-placeholder-key %}}`SECRET_KEY`{{% /code-placeholder-key %}}:
  The key of the secret to retrieve from the secret store.
- {{% code-placeholder-key %}}`CUSTOM_CONFIG_PATH`{{% /code-placeholder-key %}}:
  The non-default filepath to your Telegraf configuration file containing your
  secret store definitions.

### Retrieve a secret using the default configuration location

The following example assumes the Telegraf configuration file that contains the
secret store definition is at the [default location](/telegraf/v1/configuration/#configuration-file-locations).

{{% code-placeholders "SECRET_(STORE_ID|KEY)" %}}
```sh
telegraf secrets get SECRET_STORE_ID SECRET_KEY
```
{{% /code-placeholders %}}

### Retrieve a secret using a non-default configuration location

{{% code-placeholders "CUSTOM_CONFIG_PATH|SECRET_(STORE_ID|KEY)" %}}
```sh
telegraf --config CUSTOM_CONFIG_PATH secrets get SECRET_STORE_ID SECRET_KEY
```
{{% /code-placeholders %}}