Hello everyone,
I’m trying to get Watcher up and running on a Windows environment alongside the latest build of Suricata, but I’ve hit a roadblock.
I managed to get the Watcher web UI to load in the browser, but the interface is stuck in a continuous connection loop (trying to connect continuously without establishing a stable session).
I have the backend components in place and logging to Suricata’s eve.json, but I suspect there might be a mismatch in pathing, background service execution context, or missing configuration dependencies required specifically for a Windows deployment versus Linux.
What I’m looking for:
-
Is there any documentation, installation guide, or checklist specifically covering a native Windows setup for Watcher?
-
What are the exact prerequisites (service permissions, working directories, config variables, or helper scripts) needed to keep the backend server and watcher daemon running reliably on Windows?
Any advice, sample configurations, or pointers from others running this on Windows would be hugely appreciated!