tests/Test-HostRestarts.ps1

function Test-HostRestarts {
    [CmdletBinding()]
    param (
        [parameter()][string] $TestName = "Unplanned Server Restarts",
        [parameter()][string] $TestGroup = "operation",
        [parameter()][string] $TestCategory = "HOST",
        [parameter()][string] $Description = "Check for unplanned system restarts",
        [parameter()][hashtable] $ScriptParams
    )
    try {
        $startTime = (Get-Date)
        #[int]$Setting = Get-CmHealthDefaultValue -KeySet "keygroup:keyname" -DataSet $CmHealthConfig
        [System.Collections.Generic.List[PSObject]]$tempdata = @() # for detailed test output to return if needed
        $stat   = "PASS" # do not change this
        $except = "WARNING"
        $msg    = "No issues found" # do not change this either
        $query = @"
<QueryList>
  <Query Id="0" Path="System">
    <Select Path="System">*[System[Provider[@Name='Microsoft-Windows-Kernel-Power'] and (EventID=41) and TimeCreated[timediff(@SystemTime) &lt;= 604800000]]]</Select>
  </Query>
</QueryList>
"@

        if ($ScriptParams.ComputerName -ne $env:COMPUTERNAME) {
            Write-Log -Message "running on $($ScriptParams.ComputerName)"
            if ($null -ne $ScriptParams.Credential) {
                Write-Log -Message "credential was provided"
                $res = Get-WinEvent -LogName "System" -FilterXPath $query -ComputerName $ScriptParams.ComputerName -Credential $ScriptParams.Credential -ErrorAction SilentlyContinue
            } else {
                $res = Get-WinEvent -LogName "System" -FilterXPath $query -ComputerName $ScriptParams.ComputerName -ErrorAction SilentlyContinue
            }
        } else {
            Write-Log -Message "running on localhost"
            $res = Get-WinEvent -LogName "System" -FilterXPath $query -ErrorAction SilentlyContinue
        }
        if ($res.Count -gt 0) {
            $stat = $except
            $msg  = "$($res.Count) items found"
            $winevent = [pscustomobject]@{TimeCreated = $_.TimeCreated; Computer = $_.MachineName; Message = $_.Message}
            $res | Foreach-Object {$tempdata.Add($winevent)}
        }
    }
    catch {
        $stat = 'ERROR'
        $msg = $_.Exception.Message -join ';'
    }
    finally {
        Set-CmhOutputData
    }
}