We have an alert that is setup to notify us when a Windows Server gets rebooted. Reason behind this is some Virtual Servers can restart in less than polling time so we never knew they restarted.
What I'd like to do is include the username of the person who restarted the server in the alert. We utilize the "Last Boot Has Changed" item in our trigger condition.
Does anyone know what event or variable I can use?