One way that may solve what you are looking for is to build a table query where you filter out only "30010 Crypt Complete" Events. This will return a list of machines where encryption is finnished.
Also have a look at this valuable blog post that give you some more info about EEPC Events from a purging perspective.
thanks for information. That's what I searched for .