We have a case where the Total Latency is high for a certain production API -
<base search against an api> | stats avg(TotalLatency) by ServiceName
How can see the deviations of this TotalLatency field?
It depends on what you mean. Maybe one of these?
<base search against an api>
| stats avg(TotalLatency) stdev(TotalLatency) values(TotalLatency) BY ServiceName
View solution in original post
I placed the values of the TotalLatency in excel, sorted them out and ran a graph on the sorted values. I got the following -
So, the sorted values create this exponential graph - can we produce it within Splunk?