We are seeing a reboot event in PM but the device itself is saying it did not reboot
The reboot event is determined from sysUpTime and equates to the reboot of the network management portion of the system, not necessarily a restart of the device as a whole but both are typically done at the same time, outside of any defects.
A Reboot event is triggered when Performance Management detects a reset of the SNMP oid, sysUptime (1.3.6.1.2.1.1.3).
Example:
sysUpTime definition:
sysUpTime OBJECT-TYPE
SYNTAX TimeTicks
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The time (in hundredths of a second) since the
network management portion of the system was last
re-initialized."
::= { system 3 }
Value from SAPWALK:
1.3.6.1.2.1.1.3.0 , TimeTicks , 112001692
Conversion from TimeTicks (1/100th of a second each) to Days:
112001692 / 100 = 1120016.92
1120016.92 / 60 = 18666.94866667
18666.94866667 / 60 = 311.11581111
311.11581111 / 24 = 12.9631588
So, the network management portion of the system was last re-initialized 12.9631588 days before value in the example SAPWALK was taken