diff --git a/linux/files/heka.conf b/linux/files/heka.conf
index e742c9b..519bde5 100644
--- a/linux/files/heka.conf
+++ b/linux/files/heka.conf
@@ -1,2 +1,25 @@
-input: {}
-decoder: {}
\ No newline at end of file
+input:
+  linux_rsyslog_syslog:
+    engine: logstreamer
+    log_directory: /var/log
+    file_match: syslog\.?(?P<Index>\d+)?(.gz)?
+    priority: ["^Index"]
+    decoder: RsyslogDecoder
+  linux_rsyslog_auth:
+    engine: logstreamer
+    log_directory: /var/log
+    file_match: auth\.log\.?(?P<Index>\d+)?(.gz)?
+    priority: ["^Index"]
+    decoder: RsyslogDecoder
+  linux_rsyslog_kern:
+    engine: logstreamer
+    log_directory: /var/log
+    file_match: kern\.log\.?(?P<Index>\d+)?(.gz)?
+    priority: ["^Index"]
+    decoder: RsyslogDecoder
+decoder:
+  rsyslog:
+    engine: rsyslog
+    template: \%TIMESTAMP\% \%HOSTNAME\% \%syslogtag\%\%msg:::sp-if-no-1st-sp\%\%msg:::drop-last-lf\%\n
+    hostname_keep: TRUE
+    tz: Europe/Prague
\ No newline at end of file