How does NPM know the difference between a node goes down alert versus a node reboot alert?
For last boot we look for a lower sys uptime poll. If the sys uptime is always a larger number then the device did not recently reboot. If it returns a lower number than last poll it has been rebooted.