diff --git a/installer/etc/tpot/compose/all.yml b/installer/etc/tpot/compose/all.yml
index 713373eb..c28c4ae3 100644
--- a/installer/etc/tpot/compose/all.yml
+++ b/installer/etc/tpot/compose/all.yml
@@ -247,6 +247,8 @@ services:
     network_mode: "host"
     cap_add:
      - NET_ADMIN
+     - SYS_NICE
+     - NET_RAW
     image: "dtagdevsec/suricata:1706"
     volumes:
-     - /data/suricata:/data/suricata
+     - /data/suricata/log:/var/log/suricata
diff --git a/installer/etc/tpot/compose/industrial.yml b/installer/etc/tpot/compose/industrial.yml
index a92fadb4..5a8099b4 100644
--- a/installer/etc/tpot/compose/industrial.yml
+++ b/installer/etc/tpot/compose/industrial.yml
@@ -161,6 +161,8 @@ services:
     network_mode: "host"
     cap_add:
      - NET_ADMIN
+     - SYS_NICE
+     - NET_RAW
     image: "dtagdevsec/suricata:1706"
     volumes:
-     - /data/suricata:/data/suricata
+     - /data/suricata/log:/var/log/suricata
diff --git a/installer/etc/tpot/compose/tpot.yml b/installer/etc/tpot/compose/tpot.yml
index 70a912ee..eae3875c 100644
--- a/installer/etc/tpot/compose/tpot.yml
+++ b/installer/etc/tpot/compose/tpot.yml
@@ -216,6 +216,8 @@ services:
     network_mode: "host"
     cap_add:
      - NET_ADMIN
+     - SYS_NICE
+     - NET_RAW
     image: "dtagdevsec/suricata:1706"
     volumes:
-     - /data/suricata:/data/suricata
+     - /data/suricata/log:/var/log/suricata