Ohhh - the AppLocker Event Log itself (duh). There is a separate connector to monitor that event log directly.
You will also need to do some magic to make the connector hook up to the log - it's looking for Microsoft-Windows-AppLocker/EXEandDLL (note the spaces are removed). I don't know what these steps are and don't see them here on Thwack or in the KB so you might have to check with support.