DTRACE for IndexAdminService, EVindexingEngineElasticSearch we see the below errors
If a registry key for "Autorun" having a value of cd\, is present under registry hive "HKEY_CURRENT_USER\Software\Microsoft\Command Processor", the Enterprise Vault indexing service would not be able to create the user's file and populate the Elasticsearch username and password.
NOTE: The cd\ indicates the root directory.
Remove the registry key, till the time the indexing service starts & is fully functional with event id: 41302. It can be added once the user's file is populated with the ElasticSearch username and password.