The following event is seen in the Enterprise Vault Event logs:
Event ID: 41309 The following error message occurred in the core indexing engine: Failed to communicate with Elasticsearch indexing engine. Try restarting the Indexing Service to fix the issue.
V-437-41309
In a Dtrace of the EVIndexingEngineElasticsearch process we see below:
2802 12:11:07.093 [26520] (EVIndexingEngineElasticsearch)
2803 12:11:07.093 [26520] (EVIndexingEngineElasticsearch)
This issue was caused by a 3rd party product blocking the TCP/IP ports needed by the EV Indexing Engine.
Note: Any software that blocks communication to the indexing engine may cause this issue.
Enterprise Vault Indexing service should start successfully after removing the block caused by the 3rd party product from Enterprise Vault Server.
Please see the Related articles section for more information.