I went through the process of stopping splunk on all components, untar the installation file to /opt directory with the -C option. After completing the untar, I ran the command and accept the upgrade and license. All went well until the end when I get WARNING: web interface does not seem to be available. Everything else says done until the end, when I get the warning message.
I checked splunkd.log and I see this message:
ERROR ClusteringMgr [60815 MainThread] - pass4SymmKey setting in the clustering or general stanza of server.conf is set to empty or the default value. You must change it to a different value.
I checked server.conf file and compared with the backup file i made of the entire Splunk etc/system/local directory and the config in the files are the same.
