Application installation and uninstallation Logs on SIEM
I am trying to capture application installation and uninstallation logs in SIEM. Requirement is to tracker those peoples who has installed a new application on server and unistallation the same. So I have checked in event viewer logs post installing a application on windows server,but the logs are not getting capture in event viewer. I think i need to enable logging on windows server for this but where ? need help in this. Once the events are getting capture in server than i hope will able to see the same logs in SIEM.
Please if someone have any idea on this than please share.
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.
Community Help Hub
New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.