Node Reboot Alerts are delayed

Svc_Vselvara

Windows reboot Alert is delayed

Trigger condition is

Scope of alert

Node vendor is equal to windows 

Actual trigger condition 

Actual trigger condition (And)

Last boot has changed (Node event)

New last boot is not empty

Old last boot is not  equal to old last boot

Issue we are facing 

Windows Server-${Node Name}.system rebooted on ${Last boot}

For eg my node is tempc01

3/24/2025  tempc01 is rebooted at 3/19/2025 9:59:00AM.

1. Whenever WMI service got restarted it triggers false reboot Alert.

mesverrum

The way that ootb alert checks for a "reboot" is by watching for a time change on a sysuptime counter.  Unfortunately those time changes can happen for many reasons beside a reboot.

For windows servers I would disable that alert and trigger on the windows event log 6008, if it was my environment.