I calculated an Average for a list of values AVG(numbers), I now have a list of those Averaged numbers with the number of transactions.
What I would like to do is calculate the Standard deviation for the raw values that make up the Average, Im confused on How to actually do that with Splunk...
From what I gather, you can do both in the same search.
your_search | stats avg(numbers) stdev(numbers) by trans_id
If you want it over all events, exclude the by trans_id
clause.
http://docs.splunk.com/Documentation/Splunk/5.0/SearchReference/Commonstatsfunctions