I need the exact variable to show me Event ID 1074 - Who rebooted the server last.

I have tried using ${N=SwisEntity;M=AssetInventory.ServerInformation.LastLoggedInUser} but it gives the wrong username.

Based on Event ID 1074 User, I see the correct user who rebooted but I wan to display the user inside my alert email.

Thank you