Splunk: One for the bots/spiders
Since this took me months to find, and is apparently ungoogleable and not obvious in the docs, here's how to make an easy histogram in splunk:
"slow connect" Time<2.3| bucket Time span=0.01 | stats count by Time
and there you have it. Such a useful feature, buried.