AWS EC2 instance stopped record logged in AWS cloudtrail

Did you execute the EC2 shutdown from the API?
CloudTrail is a service that records API calls to AWS.
Therefore, shutdown from the OS (shutdown -h now), etc., will probably not be recorded in CloudTrail.
To be notified when the EC2 status changes, you may want to use the following SNS settings or other methods.
When notified that the EC2 status has changed, check the logs and other information inside the OS and troubleshoot.
https://repost.aws/knowledge-center/ec2-email-instance-state-change