new learned application which client were running this application

i have set a notification condition for new learned application the notification works normally, but i can't figure who were running what.

is there a way that i can know this application has been installed on that client.