...
From the events in access log, returns the average of the values in column Bytes Sent.
Example 2:
http in log.iis log | avg time-taken | group by sc-status From the events in log.iss log that contain http in their column values, returns the average of the values in column time-taken, grouped according to the value of the sc-status column.