Event Message:

The UPS service is starting shut down at computer name.

Source

Event Log

Event ID

Event Type

UPS

System

5152

Information

User Action:

Close any open files on this computer and disconnect from it.