Querying system health data becomes slow as event volume increases
You should check out This is how to shred Extended Event XML faster. 

The gist is to  


Put the XML into a variable.
Shred the XML rows into a temp table.


Also, see below answer by Martin Smith


Optimising plans with XML readers