To use a kvstore lookup, you need to have already a collection in "collections.conf"
then you can create the lookup in transforms.conf.
The difference is that the list of fields has to be predefined.
see http://docs.splunk.com/Documentation/Splunk/latest/Knowledge/ConfigureKVstorelookups
To populate it you can use the API endpoints
or the first time you can populate it using kvstore methods, or use an outputlookup.
example
| inputlookup myoldcsvlookup | <do some clean up if necessary> | outputlookup mynewkvstorelookupcollection
then you can use the new lookup the same way you were doing.
In a SHcluster situation, it should replicate accros with the kvstore.
