Get last (or first) item of a plural

Content Authoring
1

Would like to get the most recent time a Windows computer was force powered off.
I can do the following to get the force powered off events:
records whose (event id of it is 41) of system event log

What I would like is something like the following
time generated of (last of (records whose (event id of it is 41) of system event log))

2

Try:

maxima of times generated of records whose (event id of it is 41) of system event log

Note that this is expensive, and will take a long time to evaluate, so I would recommend you set the evaluation period to no more often than once per day.