How to change key value pair auto extraction if you are getting stash sourcetype using collect command?

[starcher]

The stash source type that you get when you use the collect command appears to have key value pair auto extraction off.

[starcher · Accepted solution]

If you want to change that, it just add the following in your props.conf

[stash]
KV_MODE = auto

Alternatively if you pipe any of your searches through the extract command before operating on fields, that will also work.

[splunker12er]

Is there any possibility to keep the same sourcetype ?