Bolt commands can accept several command line options, some of which are required.

Specify target nodes

Specify the nodes that you want Bolt to target.

For most  Bolt commands, you specify target nodes with the --nodes flag, for example, --nodes mercury. For plans, you specify nodes as a list within the task plan itself or specify them as regular parameters, like nodes=neptune.

When targeting systems with the --nodes flag, you can specify the transport either in the node URL for each host, such as --nodes winrm://mywindowsnode.mydomain, or set a default transport for the operation with the --transport option. If you do not specify a transport it will default to ssh.

Specify nodes in the command line

  • To specify multiple nodes with the --nodes flag, use a comma-separated list of nodes:
    --nodes neptune,saturn,mars
  • To generate a node list with brace expansion, specify the node list with an equals sign (=), such as --nodes=web{1,2}.

     bolt command run --nodes={web{5,6,7},elasticsearch{1,2,3}.subdomain}  

    This command runs Bolt on the following hosts:







  • To pass nodes to Bolt in a file, pass the file name and relative location with the --nodes flag and an @ symbol:

    bolt command run --nodes @nodes.txt
    For Windows PowerShell, add single quotation marks to define the file:
    bolt command run --nodes '@nodes.txt'
  • To pass nodes on stdin, on the command line, use a command to generate a node list, and pipe the result to Bolt with - after --nodes:
    <COMMAND> | bolt command run --nodes -
    For example, if you have a node list in a text file:
    cat nodes.txt | bolt command run --nodes -
  • To pass nodes as IP addresses, use protocol://user:[email protected]:port or inventory group name. You can use a domain name or IP address for host, which is required. Other parameters are optional.
    bolt command run --nodes ssh://user:[email protected][fe80::34eb:ff1:b584:d7c0]:22,
    ssh://root:[email protected], pcp://host01, winrm://Administrator:[email protected]

Specify nodes from an inventory file

To specify nodes from an inventory file, reference nodes by node name, a glob matching names in the file, or the name of a group of nodes.

  • To match all nodes in both groups listed in the inventory file example:
    --nodes elastic_search,web_app
  • To match all the nodes that start with elasticsearch in the inventory file example:
    --nodes 'elasticsearch*' 

This inventory file defines two top-level groups: elastic_search and web_app.

  - name: elastic_search
  - name: web_app

Set a default transport

To set a default transport protocol, pass it with the command with the --transport option.

Available transports are:
  • ssh

  • winrm

  • local

  • docker

  • pcp

Pass the --transport option after the nodes list:
bolt command run <COMMAND> --nodes win1 --transport winrm

This sets the transport protocol as the default for this command. If you set this option when running a plan, it is treated as the default transport for the entire plan run. Any nodes passed with transports in their URL or transports configured in inventory do not use this default.

This is useful on Windows, so that you do not have to include the winrm transport for each node. To override the default transport, specify the protocol on a per-host basis:
bolt command run facter --nodes win1,ssh://linux --transport winrm

If localhost is passed to --nodes when invoking Bolt, the local transport is used automatically. To avoid this behavior, prepend the target with the desired transport, for example ssh://localhost.

Specify connection credentials

To run Bolt on target nodes that require a username and password, pass credentials as options on the command line.

Bolt connects to remote nodes with either SSH or WinRM.

You can manage SSH connections with an SSH configuration file (~/.ssh/config) on your workstation, or you can specify the username and password on the command line.

WinRM connections always require you to pass the username and password with the bolt command:

bolt command run 'gpupdate /force' --nodes winrm://pluto --user Administrator --password <PASSWORD>

To have Bolt securely prompt for a password, use the --password or -p flag without supplying any value. Bolt then prompts for the password, so that it does not appear in a process listing or on the console. 

Rerunning commands based on the last result

After every execution, Bolt writes information about the result of that run to a .rerun.json file inside the Bolt project directory. That file can then be used to specify nodes for future commands.

To attempt to retry a failed action on target nodes, use --rerun failure. To continue targeting those nodes, pass --no-save-rerun to prevent updating the file.
bolt command run false --nodes all
bolt command run whoami --rerun failure --no-save-rerun
If one command is dependent on the success of a previous command, you can target the successful nodes with --rerun success.
bolt task run package action=install name=httpd --nodes all
bolt task run server action=restart name=httpd --rerun success
Note: When a plan does not return a ResultSet object, Bolt can't save information for reruns and .rerun.json is deleted.
Back to top
The page rank or the 1 our of 5 rating a user has given the page.
The email address of the user submitting feedback.
The URL of the page being ranked/rated.