This is definitely the right place.
I think this should be possible with the Get-VIEvent cmdlet.
It's a matter of how long you keep the vCenter events (the default is forever).
In that case it would be a matter of filtering out the VmClonedEvent events and the VmDeployedEvent events.
Based on those a script should be able to determine how a guest came to be.
Have a look at some of my Event post. They show the principle.
This looks like a useful script, let me get back to you
____________
Blog: LucD notes
Twitter: lucd22