Works. Thanks for the help
Made a small change.
your base search giving Timestamp, Event1 | eval _time=Timestamp | eval Type=if(Event1>=35,1,0) | streamstats current=f window=1 first(Type) as previous | eval temp=if(Type=previous,0,1) | accum temp as tempcount | eventstats max(_time) as max min(_time) as min by tempcount | eval duration=(max-min)/600 | where duration>=1 | table _time Event1 duration
... View more