Use more robust logstreamer file match

Change-Id: I03d2ca55649f00eb44c72d0c6282de0192e9004a
diff --git a/keystone/meta/heka.yml b/keystone/meta/heka.yml
index 4dfaa7b..ef73032 100644
--- a/keystone/meta/heka.yml
+++ b/keystone/meta/heka.yml
@@ -11,8 +11,8 @@
   input:
     keystone_log:
       engine: logstreamer
-      log_directory: "/var/log/keystone"
-      file_match: '(?P<Service>.+)\.log\.?(?P<Seq>\d*)$'
+      log_directory: "/var/log"
+      file_match: 'keystone/(?P<Service>.+)\.log\.?(?P<Seq>\d*)$'
       differentiator: ['keystone', '_', 'Service']
       priority: ["^Seq"]
       decoder: "keystone_decoder"