For the sake of anyone else following along, here is the action step in the Scheduled Task. You are querying for Autotask tickets using the Autotask API:
The Autotask API doesn’t support sending a regular expression through the query. The query configured above will search for a ticket where the title is the literal value of The previous system shutdown at [\w\s\-:\?\d\/]* was unexpected. for \S*.
Since you can’t submit a regular expression to the Autotask API, I recommend you query the API to find a ticket where the title contains The previous system shutdown at and the title also contains was unexpected.. This may return other results, but it may be good enough for your purpose (only you will know that).
To configure the action to query this way, configure it like this: