cancel
Showing results for 
Search instead for 
Did you mean: 
Highlighted

Application installation and uninstallation Logs on SIEM

Hi Team,

I am trying to capture application installation and uninstallation logs in SIEM. Requirement is to tracker those peoples who has installed a new application on server and unistallation the same. So I have checked in event viewer logs post installing a application on windows server,but the logs are not getting capture in event viewer. I think i need to enable logging on windows server for this but where ? need help in this. Once the events are getting capture in server than i hope will able to see the same logs in SIEM.

Please if someone have any idea on this than please share.

2 Replies

Re: Application installation and uninstallation Logs on SIEM

Any one please share the information for this..

Reliable Contributor sssyyy
Reliable Contributor
Report Inappropriate Content
Message 3 of 3

Re: Application installation and uninstallation Logs on SIEM

Application installation and uninstallation might not fall under Application,System,Security. Have you checked other Windows Events?

More McAfee Tools to Help You
  • Subscription Service Notification (SNS)
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • eSupport: Policy Orchestrator