...
* in log.access | sum Bytes Sent
Returns the sum the sum of the values in the column Bytes Sent from in the events in access log.from access log.
Example 2:
http in log.iis log| sum time-taken | group by c-ip From the events from log.iss log that have the text http in their column values, calculates the sum of the values in the time-taken column per each c-ip column value.