Assuming your VM is a windows server. You could download the windows event log forwarder from your customer portal (under additional components), then configure it to forward event ID 6009 to your NPM server as a syslog message. (This is assuming the vm is a windows box)
You would then configure an alert in the syslog viewer to advise you when a reboot occurs.
SolarWinds solutions are rooted in our deep connection to our user base in the THWACK® online community. More than 150,000 members are here to solve problems, share technology and best practices, and directly contribute to our product development process. Learn more today by joining now.