diff --git a/pkgs/by-name/si/sigma-cli/package.nix b/pkgs/by-name/si/sigma-cli/package.nix
index 2dec38c22050..0b23e7b71ff5 100644
--- a/pkgs/by-name/si/sigma-cli/package.nix
+++ b/pkgs/by-name/si/sigma-cli/package.nix
@@ -33,6 +33,7 @@ python3.pkgs.buildPythonApplication rec {
     pysigma-backend-opensearch
     pysigma-backend-qradar
     pysigma-backend-splunk
+    pysigma-backend-loki
     pysigma-pipeline-crowdstrike
     pysigma-pipeline-sysmon
     pysigma-pipeline-windows
diff --git a/pkgs/development/python-modules/pysigma-backend-loki/default.nix b/pkgs/development/python-modules/pysigma-backend-loki/default.nix
new file mode 100644
index 000000000000..86675b22a6bf
--- /dev/null
+++ b/pkgs/development/python-modules/pysigma-backend-loki/default.nix
@@ -0,0 +1,38 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  poetry-core,
+  pysigma,
+  pytestCheckHook,
+}:
+
+buildPythonPackage rec {
+  pname = "pysigma-backend-loki";
+  version = "0.12.3";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "grafana";
+    repo = "pySigma-backend-loki";
+    tag = "v${version}";
+    hash = "sha256-tsAtD98vWU8mB+Y3ePp2S54dSDu5R7DIDYDin+JJgSg=";
+  };
+
+  build-system = [ poetry-core ];
+
+  dependencies = [ pysigma ];
+
+  pythonRelaxDeps = [ "pysigma" ];
+
+  nativeCheckInputs = [ pytestCheckHook ];
+
+  pythonImportsCheck = [ "sigma.backends.loki" ];
+
+  meta = with lib; {
+    description = "Library to support the loki backend for pySigma";
+    homepage = "https://github.com/grafana/pySigma-backend-loki";
+    license = with licenses; [ lgpl21Only ];
+    maintainers = with maintainers; [ peterromfeldhk ];
+  };
+}
diff --git a/pkgs/top-level/python-packages.nix b/pkgs/top-level/python-packages.nix
index dff69ccf21bc..cccc5d6c0b51 100644
--- a/pkgs/top-level/python-packages.nix
+++ b/pkgs/top-level/python-packages.nix
@@ -12788,6 +12788,8 @@ self: super: with self; {
 
   pysigma-backend-insightidr = callPackage ../development/python-modules/pysigma-backend-insightidr { };
 
+  pysigma-backend-loki = callPackage ../development/python-modules/pysigma-backend-loki { };
+
   pysigma-pipeline-crowdstrike = callPackage ../development/python-modules/pysigma-pipeline-crowdstrike { };
 
   pysigma-pipeline-sysmon = callPackage ../development/python-modules/pysigma-pipeline-sysmon { };