Create an EDF that is a checkbox called "Monitor software installs" generated at a computer level. Make a search that searches for that EDF being true. Create a group called "Monitor Software Installs" as a greyed out master and apply the search. Create an internal monitor that looks at v_softwarehistory and the action column to determine an install has taken place, scope the group in the monitor to the group created before. Set an alert template. The end!