Like here on TechNet - under the "Appears As" column - c-ip, cs-uri-query, etc.
(I got a log file where the columns are described that way but I don't understand those prefix letters.)
c-ip
, the IP address of the client)s-ip
, the IP address of the server)cs-bytes
, the number of bytes sent to the server)sc-bytes
, the number of bytes sent to the client)