...

execute [expression] (as result1, result2)

Required Arguments

expression

Syntax: mathematical expression

Description: Performs on the search results, a mathematical expression on that the user formulates using the search resultsExecute search syntax (see http://www.japisoft.com/formula/doc/index.html).

Optional Arguments

result1, result2

...

Description: If the results that the executed expression returns are expected to go into more than one column, the names of the columns preceded by as must be placed in parentheses following the expression. 

Description

Executes an expression on each event in the search query, an expression. If the returned results go into more than one column, they are entered under the columns whose names appear in parentheses after the expression.

...

* in log.access |  execute if (total == NULL) THEN (total = 0); if (column.bytes\ sent != NULL && column.bytes\ sent != "-") THEN (total = total + column.bytes\ sent);total | group by status | order by value desc 

Computes the total of the bytes sent column of the events in log access per status, and displays the total of each status in descending order of the total value.