Monitor a Hybrid computer shutdown in Azure Arc

I’ve seen this happen with Azure Arc alerts. If the query isn’t returning any values, I’d first check whether the Arc machine is actually sending the expected heartbeat data to the Log Analytics workspace. Also make sure the alert query is looking at the correct table and that the time window matches your alert evaluation period. A missing heartbeat is usually easier to monitor than the machine’s actual shutdown state.