Mine was a permission issue, the above steps from Marrette fixed our issue and I was able to upgrade and restart my IDX. PS: In my environment, our "splunk.key" was located @ /splunk/kvstore/mongo/splunk.key. Thank you. ... View more