I have a questions regarding the upgrade
yes (as long as you do the cluster master first, and then set maint mode) and yes
http://docs.splunk.com/Documentation/Splunk/6.5.2/Indexer/Upgradeacluster