As mesverrum said, you'll need agents on the client systems for process monitoring. You'll also have to make sure that your audit policy is configured to get process information. In Windows, you'll need to look at the Detailed Tracking settings in your audit policies.
Specifically, you'll need to set your "Process Creation" and "Process Termination" events at least to "Success."