Strange sls config issue - spot the difference?

gistfile1.txt

# works
test:
  pkg.installed:
    - name: elasticsearch
  service.running:
    - name: elasticsearch
    - watch:
      - file: /etc/elasticsearch/elasticsearch.yml
      - file: /etc/security/limits.conf

# does not work
elasticsearch:
  pkg.installed:
    - name: elasticsearch
  service.running:
    - name: elasticsearch
    - watch:
      - file: /etc/elasticsearch/elasticsearch.yml
      - file: /etc/security/limits.conf


# results of highstate for machine that has elasticsearch running
--
          ID: test
    Function: service.running
        Name: elasticsearch
      Result: True
     Comment: The service elasticsearch is already running
     Started: 09:18:02.998174
    Duration: 42.376 ms
--
          ID: elasticsearch
    Function: service.running
      Result: None
     Comment: Service is set to be restarted
     Started: 09:18:03.099611
    Duration: 14.294 ms
     Changes:   
--