As I understand what you have said, and please correct me if I am wrong, is that you want a bar chart such that when you click on the zipZero bar (for example) the other panel filters your results to show the corresponding events? In the following example, when a bar in the column chart is clicked, the filter token is set to a value that can be used in the where clause of the subsequent panel e.g. Nov_20 != 0. In your case, if the zipZero bar is clicked, you could set your token to i_postcode="00000" and use that in your subsequent panel. <row>
<panel>
<chart>
<title>Message received</title>
<search>
<query>| makeresults | eval _raw="Messages,Nov_20,Dec_20,Jan_21,Feb_21
Messge 0,0,1,0,0
Messge 1,1,3,1,1
Messge 2,11,0,0,0
Messge 3,1,0,0,0
Messge 4,9,5,0,0
Messge 5,1,1,0,0
Messge 6,1,1,0,0
Messge 7,0,1,0,0"
| multikv forceheader=1
| fields - _raw _time linecount
| fields - _mkv*
| fields Messages *</query>
<earliest>-15m</earliest>
<latest>now</latest>
<sampleRatio>1</sampleRatio>
</search>
<option name="charting.chart">column</option>
<option name="charting.drilldown">all</option>
<option name="refresh.display">progressbar</option>
<drilldown>
<eval token="filter">
case($click.name2$="Nov_20","Nov_20!=0",$click.name2$="Dec_20","Dec_20!=0",$click.name2$="Jan_21","Jan_21!=0",$click.name2$="Feb_21","Feb_21!=0")
</eval>
</drilldown>
</chart>
</panel>
<panel depends="$filter$">
<table>
<title>Selected dates</title>
<search>
<query>| makeresults | eval _raw="Messages,Nov_20,Dec_20,Jan_21,Feb_21
Messge 0,0,1,0,0
Messge 1,1,3,1,1
Messge 2,11,0,0,0
Messge 3,1,0,0,0
Messge 4,9,5,0,0
Messge 5,1,1,0,0
Messge 6,1,1,0,0
Messge 7,0,1,0,0"
| multikv forceheader=1
| fields - _raw _time linecount
| fields - _mkv*
| fields Messages *
| where $filter$</query>
<earliest>-15m</earliest>
<latest>now</latest>
<sampleRatio>1</sampleRatio>
</search>
<option name="count">20</option>
<option name="dataOverlayMode">none</option>
<option name="drilldown">none</option>
<option name="percentagesRow">false</option>
<option name="refresh.display">progressbar</option>
<option name="rowNumbers">false</option>
<option name="totalsRow">false</option>
<option name="wrap">true</option>
</table>
</panel>
</row>
... View more
