Skip to content

CE-2708: Fix MOTD for template IOCs

In order to determine which IOCs are deployed on a host, we look for the file metadata.json which contains information about what IOCs were deployed to a given host. Unfortunately, ce-template-based IOCs also deploy a file of the same name, which causes issues when trying to determine the IOC name, resulting in a MOTD that looks like

IOCs currently deployed on this host:
- [
- '
- M
- B
- L
- -
- 0
- 4
- 0
- R
- F
- C
etc.

This is due to the fact that this metadata file does not have a name key, resulting in an improper handling of the read-in data on the Parse deployed IOC metadata task.

Note that this is ansible-version dependant; the version in use (2.9) produces this output; newer versions will cause the aforementioned task to simply fail.

Merge request reports