from the authoring tab in the scom console.
authoring > mp objects > monitors > rightclick create unit monitor and select windows events > and pick one of the repeated event detection monitor templates (i prefer the timed reset). On the event expression fill in the reboot event of
the eventlog and repeat settings tab you specify what the repeat settings are (trigger on count or trigger on count sliding, what you prefer).
Rob Korving
http://jama00.wordpress.com/