missed event detection

As part of event collection, add a function to detect when an event "does not occur", such as heartbeat events that are logged to the windows event log.