...
Also, select the "By log" option, and then choose "Applications and ServicesWindows Log" in the dropdown.
for the Application and Services -
1. Click on + next to Application & Services:
2. Click on + next to Microsoft
3. Click on + Next to Windows
4. Check the box next to "DriverFrameworks-UserMode"
1.12 Click OK on the Subscription Properties dialog box. The subscription will be added to the Subscriptions pane.
...
1.Forward logs from the other sources on this collector. Follow the steps in the article using the link below on source computers:
Event forwarding from Source Windows Computers
...
3. Steps to enable audit logs are given in the article from the link below:
Windows- Enable Audit Logs/Policies