This seems a simple task but with virtual machines (especially Server 2012 on up) rebooting within seconds (if that) sometimes it seems you can't just alert based on a system down/up.
The alert we are using take "Last Reboot Time", compares the values, and alerts that a node has been rebooted.
This would be fine except during patching, when we know a node is to be rebooted, we would like to mute this alert. The problem is that once un-muted the alert continues to do what it is told and compares the values of the field.
As such -- an ALERT is triggered (even when unmanaged or muted).
There probably is a simple answer and I'm continue to look for it but I thought I would ask the community what, if anything, they have setup to handle a situation like this.
