How to disable reports in Splunk Secure Gateway (ssg)

[las]

Hi.

I'm in the process of migrating Splunk Search Heads from a Windows installation to a SHC on Linux.

When using Splunk Mobile on the old Windows environment, reports are not visible in Splunk Mobile, but in the new Linux Environment a lot of reports are visible, even from apps, that are not enabled for mobile.

I would actually like to completely disable report visibility, if that is possible.

Does anyone know where I need to look for control over the reports? I couldn't find anything in the docs.

Kind regards

las

[las]

Hi Prewin.

The Role solution is not viable for us, as the role is allowed to see the report, but the data must not leave on-prem, so that is unfortunately not an option.

I have disabled all apps, except a few, that has the dashboards for Mobile, but SSG shows reports from apps, that are not enabled in SSG.

It is a good suggestion, but not workable in our case.

Kind regards

las

[PrewinThomas]

@las 

Once SSG is active, it can lists all reports that are shared to “App” or “All apps” scope. The workaround you can try is, restrict to specific roles. Reports not shared to the user’s role will not appear in Splunk Mobile.
Also you can try disabling entire app in SSG, ideally this should not list reports/dashboards from that app in splunk mobile(This i havent tested, but should work)

Regards,
Prewin
If this answer helped you, please consider marking it as the solution or giving a Karma. Thanks!