How to pick a values are in sequence using streamstats greater than 8 continuous value

[DataOrg]

If a streamstats sequence value is continuous to 1-10 values. i need to pick entire count of data . My search is | streamstats reset_on_change=true count(value_TS) AS Sequence BY incremented TS
for example: if sequence is equal to 4 or greater than 3. i need to pick all 4 values ie(1-4) or else skip
mockUp data
streamsstats
1
2
3
4
1
1
1
2
3

[somesoni2]

Whats the expected output of your sample data?

[to4kawa · Accepted solution]

your_search
| streamstats reset_on_change=true count(value_TS) AS Sequence BY incremented TS
| reverse
| streamstats reset_after="Sequence=1" count(eval(Sequence>=4)) as flag
| reverse
| where flag > 0

Hi, @premranjithj
How about this?

[DataOrg]

@to4kawa Super !!! thanks 🙂 worked

[richgalloway]

Try this untested search:

...  | streamstats reset_on_change=true count(value_TS) AS Sequence BY incremented TS
| streamstats max(Sequence) as Max
| where Max > 3
| ...

[DataOrg]

the max value is following the change in sequence value too. i need only the first 4 values and if the sequence is followed in other sequence need to pick the fresh set of values