How can we find the deviations of the Total Latency of a certain service?

[ddrillic]

We have a case where the Total Latency is high for a certain production API -

<base search against an api> | stats avg(TotalLatency) by ServiceName

How can see the deviations of this TotalLatency field?

[ddrillic]

I placed the values of the TotalLatency in excel, sorted them out and ran a graph on the sorted values. I got the following -

So, the sorted values create this exponential graph - can we produce it within Splunk?

[woodcock · Accepted solution]

It depends on what you mean. Maybe one of these?

<base search against an api>
| stats avg(TotalLatency) stdev(TotalLatency) values(TotalLatency) BY ServiceName