I've seen it a few times where the node names in "triggered alerts" and event logs make no sense... Here is one, where a node known as "Rm306-TC01" gets reported by what apparently is its old name, "Rm308-TC01".
What gives? (Hope the images sufficiently illustrate the issue.)