Hello @robin.gierse. Thank you for your reply.
Yes, it is most often the system log and application log entries that we are receiving these notifications for. As stated in my previous posts though, the warnings are for events that were created as a direct result of the server reboot (like WinRM, for example) because the services are unavailable during the reboot process. Having created a down time and excluded that form the CheckMK monitoring period, I had hoped it would ignore these types of entries. However, what seems to be happening is that once the CheckMK down time period expires, it is then reporting and sending notifications for these warnings that actually occurred during the down time exclusionary time frame.
Have you any advise you can provide on how to avoid this? Thank you.