---
title: pulumi logs decrypt | CLI commands
url: /docs/iac/cli/commands/pulumi_logs_decrypt/
---

Decrypt and display automatic logs

## Synopsis

Decrypt and display the contents of an automatic log file.

If no filename is provided, the most recent log file is
decrypted. When a current stack is selected (or --stack is
given), logs for that stack are preferred.

For encrypted logs, the stack's secrets provider is used
for decryption (parsed from the filename, or overridden
with --stack). Gzip-compressed logs are decompressed
without needing a stack.

```
pulumi logs decrypt [filename] [flags]
```

## Options

```
  -h, --help   help for decrypt
```

## Options inherited from parent commands

```
      --color string                 Colorize output. Choices are: always, never, raw, auto (default "auto")
      --config-file string           Use the configuration values in the specified file rather than detecting the file name
  -C, --cwd string                   Run pulumi as if it had been started in another directory
      --disable-integrity-checking   Disable integrity checking of checkpoint files
  -e, --emoji                        Enable emojis in the output
  -f, --follow                       Follow the log stream in real time (like tail -f)
  -Q, --fully-qualify-stack-names    Show fully-qualified stack names
  -j, --json                         Emit output as JSON
      --logflow                      Flow log settings to child processes (like plugins)
      --logtostderr                  Log to stderr instead of to files
      --memprofilerate int           Enable more precise (and expensive) memory allocation profiles by setting runtime.MemProfileRate
      --non-interactive              Disable interactive mode for all commands
      --otel-traces string           Export OpenTelemetry traces to the specified endpoint. Use file:// for local JSON files, grpc:// for remote collectors
      --profiling string             Emit CPU and memory profiles and an execution trace to '[filename].[pid].{cpu,mem,trace}', respectively
  -r, --resource string              Only return logs for the requested resource ('name', 'type::name' or full URN).  Defaults to returning all logs.
      --since string                 Only return logs newer than a relative duration ('5s', '2m', '3h') or absolute timestamp.  Defaults to returning the last 1 hour of logs. (default "1h")
  -s, --stack string                 The name of the stack to operate on. Defaults to the current stack
      --tracing file:                Emit tracing to the specified endpoint. Use the file: scheme to write tracing data to a local file
  -v, --verbose int                  Enable verbose logging (e.g., v=3); anything >3 is very verbose
```

## SEE ALSO

* [pulumi logs](/docs/iac/cli/commands/pulumi_logs/)	 - Show aggregated resource logs for a stack