If I understand your request and *IF* you are already monitoring all the VM hosts using the built in IVIM then frankly I would approach this as an alert on the VirtualMachinesView table for devices which are running yet do not have a corresponding node id.
Run this query in your DB Manager or MSMS to confirm you will see what you expect:
SELECT VirtualMachinesView.VirtualMachineID AS NetObjectID, VirtualMachinesView.DisplayName AS Name
FROM VirtualMachinesView
WHERE gueststate = 'running' AND
NodeID IS NULL
if that does return what you expect then you can create a CustomSQL ALert for the object Virtual Machine and just add:
WHERE gueststate = 'running' AND
NodeID IS NULL
Works for me...
