Skip to main content
  1. Docs
  2. pulumi logs decrypt | CLI commands

pulumi logs decrypt | CLI commands

    Decrypt and display automatic logs

    Synopsis

    Decrypt and display the contents of an automatic log file.

    If no filename is provided, the most recent log file is decrypted. When a current stack is selected (or –stack is given), logs for that stack are preferred.

    For encrypted logs, the stack’s secrets provider is used for decryption (parsed from the filename, or overridden with –stack). Gzip-compressed logs are decompressed without needing a stack.

    pulumi logs decrypt [filename] [flags]

    Options

      -h, --help   help for decrypt

    Options inherited from parent commands

          --color string                 Colorize output. Choices are: always, never, raw, auto (default "auto")
      --config-file string           Use the configuration values in the specified file rather than detecting the file name
  -C, --cwd string                   Run pulumi as if it had been started in another directory
      --disable-integrity-checking   Disable integrity checking of checkpoint files
  -e, --emoji                        Enable emojis in the output
  -f, --follow                       Follow the log stream in real time (like tail -f)
  -Q, --fully-qualify-stack-names    Show fully-qualified stack names
  -j, --json                         Emit output as JSON
      --logflow                      Flow log settings to child processes (like plugins)
      --logtostderr                  Log to stderr instead of to files
      --memprofilerate int           Enable more precise (and expensive) memory allocation profiles by setting runtime.MemProfileRate
      --non-interactive              Disable interactive mode for all commands
      --otel-traces string           Export OpenTelemetry traces to the specified endpoint. Use file:// for local JSON files, grpc:// for remote collectors
      --profiling string             Emit CPU and memory profiles and an execution trace to '[filename].[pid].{cpu,mem,trace}', respectively
  -r, --resource string              Only return logs for the requested resource ('name', 'type::name' or full URN).  Defaults to returning all logs.
      --since string                 Only return logs newer than a relative duration ('5s', '2m', '3h') or absolute timestamp.  Defaults to returning the last 1 hour of logs. (default "1h")
  -s, --stack string                 The name of the stack to operate on. Defaults to the current stack
      --tracing file:                Emit tracing to the specified endpoint. Use the file: scheme to write tracing data to a local file
  -v, --verbose int                  Enable verbose logging (e.g., v=3); anything >3 is very verbose

    SEE ALSO

    • pulumi logs - Show aggregated resource logs for a stack
    Auto generated by spf13/cobra on 8-May-2026