diff --git a/services/ntpsec.ts b/services/ntpsec.ts
index db313e6..5587453 100644
--- a/services/ntpsec.ts
+++ b/services/ntpsec.ts
@@ -1,6 +1,7 @@
 import { Alpine } from "../alpine.js";
 import { sudoWriteFile } from "../helpers/sudo.js";
 import { Runit } from "../runit/index.js";
+import { FluentBitParser, runitLokiLogger } from "../software/fluentbit.js";
 
 export async function setupNtpsec(alpine: Alpine, runit: Runit) {
   await alpine.addPackages(["ntpsec"]);
@@ -48,6 +49,7 @@ server gps.ntp.br nts iburst
     "ntpsec",
     `#!/bin/sh
 exec ntpd --nice --nofork --panicgate
-`
+`,
+    runitLokiLogger(FluentBitParser.Ntpsec, "ntpsec")
   );
 }
diff --git a/software/fluentbit.ts b/software/fluentbit.ts
index fcc119b..ed1b341 100644
--- a/software/fluentbit.ts
+++ b/software/fluentbit.ts
@@ -34,6 +34,7 @@ export enum FluentBitParser {
   Raw = "raw",
 
   Forgejo = "forgejo",
+  Ntpsec = "ntpsec",
 }
 
 async function saveParsers(alpine: Alpine): Promise<void> {
@@ -51,6 +52,11 @@ async function saveParsers(alpine: Alpine): Promise<void> {
     name forgejo
     format regex
     regex ^((?<time>\\d{4}\\/\\d{2}\\/\\d{2} \\d{2}:\\d{2}:\\d{2}?) )?((?<trace>.+:.+:.+\\(\\)?) \\[(?<level>.?)\\] )?(?<message>.*?)$
+
+[PARSER]
+    name ntpsec
+    format regex
+    regex ^(?<time>\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}) (?<process>.+\\[\\d+\\]): (?<component>\\w+): (?<message>.+)$
 `
   );
 }