2 Replies Latest reply on Sep 3, 2017 6:28 PM by sssyyy

    Application installation and uninstallation Logs on SIEM

    davidp64

      Hi Team,

       

      I am trying to capture application installation and uninstallation logs in SIEM. Requirement is to tracker those peoples who has installed a new application on server and unistallation the same. So I have checked in event viewer logs post installing a application on windows server,but the logs are not getting capture in event viewer. I think i need to enable logging on windows server for this but where ? need help in this. Once the events are getting capture in server than i hope will able to see the same logs in SIEM.

       

      Please if someone have any idea on this than please share.