---
title: telegraf secrets get
description: The telegraf secrets get command retrieves the value of a secret from the specified secret store.
url: https://docs.influxdata.com/telegraf/v1/commands/secrets/get/
estimated_tokens: 716
product: Telegraf Controller
version: v1
publisher: InfluxData
canonical: https://docs.influxdata.com/telegraf/v1/commands/secrets/get/
date: '2026-05-15T15:46:14-06:00'
lastmod: '2026-05-15T15:46:14-06:00'
---

The `telegraf secrets get` command retrieves the value of a secret from the
specified secret store.

> [!Note]
> This command requires your configuration file that contains the secret store
> definitions you want to access. If the `--config` or `--config-directory` flags
> are not included in the command, Telegraf checks the[default configuration file location](/telegraf/v1/configuration/#configuration-file-locations).

Use [`telegraf secrets list`](/telegraf/v1/commands/secrets/list/) to get the
IDs of available secret stores and the available secret keys.

If you haven’t configured a secret store, use[`telegraf plugins secretstores`](/telegraf/v1/commands/plugins/secretstores/)to list available secret store plugins.
View secret store plugin configuration documentation in the[Telegraf GitHub repository](https://github.com/influxdata/telegraf/tree/master/plugins/secretstores).

## Usage

```sh
telegraf [global-flags] secrets get [flags] <SECRET_STORE_ID> <SECRET_KEY>
```

## Arguments

|      Argument       |                   Description                    |
|---------------------|--------------------------------------------------|
|**SECRET\_STORE\_ID**|ID of the secret store to retrieve the secret from|
|   **SECRET\_KEY**   |          Key of the secret to retrieve           |

## Flags

|Flag|        |   Description   |
|----|--------|-----------------|
|`-h`|`--help`|Show command help|

*Also see [Telegraf global flags](/telegraf/v1/commands/#telegraf-global-flags).*

## Examples

* [Retrieve a secret using the default configuration location](#retrieve-a-secret-using-the-default-configuration-location)
* [Retrieve a secret using a non-default configuration location](#retrieve-a-secret-using-a-non-default-configuration-location)

In the examples below, replace the following:

* `SECRET_STORE_ID`:
  The ID of the secret store to retrieve the secret from.
* `SECRET_KEY`:
  The key of the secret to retrieve from the secret store.
* `CUSTOM_CONFIG_PATH`:
  The non-default filepath to your Telegraf configuration file containing your
  secret store definitions.

### Retrieve a secret using the default configuration location

The following example assumes the Telegraf configuration file that contains the
secret store definition is at the [default location](/telegraf/v1/configuration/#configuration-file-locations).

```sh
telegraf secrets get SECRET_STORE_ID SECRET_KEY
```

### Retrieve a secret using a non-default configuration location

```sh
telegraf --config CUSTOM_CONFIG_PATH secrets get SECRET_STORE_ID SECRET_KEY
```
| Argument | Description |
| --- | --- |
| Argument | Description |
| SECRET_STORE_ID | ID of the secret store to retrieve the secret from |
| SECRET_KEY | Key of the secret to retrieve |

| Flag |  | Description |
| --- | --- | --- |
| Flag |  | Description |
| -h | --help | Show command help |