diff --git a/backupninja/files/heka.toml b/backupninja/files/heka.toml
new file mode 100644
index 0000000..9ac1103
--- /dev/null
+++ b/backupninja/files/heka.toml
@@ -0,0 +1,17 @@
+[logstreamer_backupninja]
+type = "LogstreamerInput"
+log_directory = "/var/log"
+file_match = 'backupninja\.log\-?(?P<Index>\d+)?(\.gz)?'
+priority = ["^Index"]
+decoder = "Sandbox_backupninja"
+
+[Sandbox_backupninja]
+type = "PayloadRegexDecoder"
+match_regex = '(?P<Timestamp>\w+ \d+ [0-9:]+) (?P<Severity>\w+): (?P<Payload>.*)'
+timestamp_layout = "Jan 02 15:04:05"
+
+[Sandbox_backupninja.severity_map]
+Debug = 7
+Info = 6
+Warning = 4
+Error = 3
diff --git a/metadata/service/support.yml b/metadata/service/support.yml
index b7273bd..5e12c47 100644
--- a/metadata/service/support.yml
+++ b/metadata/service/support.yml
@@ -6,7 +6,7 @@
       collectd:
         enabled: false
       heka:
-        enabled: false
+        enabled: true
       sensu:
         enabled: true
       sphinx: