Average for Multiple CSI-URI-Stem

Hello Guys,

I am new with the log parser so I would like your help to check my code.  The purpose of the script is to get the average of the multiple URL but I'm not getting the right output. Probably I have an issue with my code.

Here is my code:

SELECT
s-ip as ServerIP,
cs-uri-stem as URL,
AVG(TO_INT (TimeTakenMS)) as TimeTakenMS

FROM

'\\server1\d$\*.log',
'\\server2\d$\*.log',
'\\server3\*.log'

where
date-local = '2016-05-11' and
time-local> '01:00:00' and time-local < '17:00:00' and
cs-uri-stem = '/_layouts/test1' or
cs-uri-stem = '/_layouts/test2' or
cs-uri-stem = '/_layouts/test3'
group by cs-uri-stem ,s-ip

I'm not sure if I need a subquery on this.

Thanks,

OrlyDirk