Application installation and uninstallation Logs on SIEM
I am trying to capture application installation and uninstallation logs in SIEM. Requirement is to tracker those peoples who has installed a new application on server and unistallation the same. So I have checked in event viewer logs post installing a application on windows server,but the logs are not getting capture in event viewer. I think i need to enable logging on windows server for this but where ? need help in this. Once the events are getting capture in server than i hope will able to see the same logs in SIEM.
Please if someone have any idea on this than please share.