avgif() (aggregation function)

Applies to: ✅ Azure Data Explorer ✅ Azure Monitor ✅ Microsoft Sentinel

Calculates the average of expr in records for which predicate evaluates to true.

Note

This function is used in conjunction with the summarize operator.

Syntax

avgif (expr, predicate)

Name	Type	Required	Description
expr	`string`	✔️	The expression used for aggregation calculation. Records with `null` values are ignored and not included in the calculation.
predicate	`string`	✔️	The predicate that if true, the expr calculated value will be added to the average.

Returns the average value of expr in records where predicate evaluates to true.

This example calculates the average damage by state in cases where there was any damage.

StormEvents
| summarize Averagedamage=tolong(avg( DamageCrops)),AverageWhenDamage=tolong(avgif(DamageCrops,DamageCrops >0)) by State

The results table shown includes only the first 10 rows.