I want to know: Can this be supported on splunk 5.0?
To have a dynamic input date, you can create an dashboard and add a time input, add a panel and enter your search without puting in your search earliest= latest= . Your dashboard xml code will display as follows:
<label>Form with time picker</label>
<description></description>
<fieldset submitButton="false">
<input type="time" searchWhenChanged="true" token="global_time_input_tok">
<label>Select time range</label>
<default>
<earliest>-24h@h</earliest>
<latest>now</latest>
</default>
</input>
</fieldset>
<row>
<panel>
<title>Global timer</title>
<chart>
<search>
<query> Write your search </query>
<earliest>$global_time_input_tok.earliest$</earliest>
<latest>$global_time_input_tok.latest$</latest>
</search>
</chart>
</panel>
</row>
</form>
... View more