diff --git a/plugin/src/test/resources/rest-api-spec/test/ml/post_data.yaml b/plugin/src/test/resources/rest-api-spec/test/ml/post_data.yaml
index ff2813033fb..ce19aaa3cf9 100644
--- a/plugin/src/test/resources/rest-api-spec/test/ml/post_data.yaml
+++ b/plugin/src/test/resources/rest-api-spec/test/ml/post_data.yaml
@@ -77,10 +77,10 @@ setup:
   - match: { jobs.0.state: "closed" }
 
   - do:
-    get:
-      index: .ml-anomalies-farequote
-      type: data_counts
-      id: farequote-data-counts
+      get:
+        index: .ml-anomalies-farequote
+        type: data_counts
+        id: farequote-data-counts
 
   - match: { _source.processed_record_count: 2 }
   - match: { _source.processed_field_count: 4}
diff --git a/qa/smoke-test-watcher-with-painless/src/test/resources/rest-api-spec/test/watcher_painless/50_update_scripts.yaml b/qa/smoke-test-watcher-with-painless/src/test/resources/rest-api-spec/test/watcher_painless/50_update_scripts.yaml
index 8e3e34532aa..693b51d857e 100644
--- a/qa/smoke-test-watcher-with-painless/src/test/resources/rest-api-spec/test/watcher_painless/50_update_scripts.yaml
+++ b/qa/smoke-test-watcher-with-painless/src/test/resources/rest-api-spec/test/watcher_painless/50_update_scripts.yaml
@@ -6,19 +6,19 @@
       features: warnings
 
   - do:
-    cluster.health:
-      wait_for_status: yellow
+      cluster.health:
+        wait_for_status: yellow
 
   - do:
-    put_script:
-      lang: transform-script
-      body: >
-        {
-          "script":{
-            "lang": "painless",
-            "code":"return [ 'email': 'foo@bar.org' ]"
+      put_script:
+        lang: transform-script
+        body: >
+          {
+            "script":{
+              "lang": "painless",
+              "code":"return [ 'email': 'foo@bar.org' ]"
+            }
           }
-        }
 
   - do:
       xpack.watcher.put_watch:
@@ -57,16 +57,16 @@
   - match: { "watch_record.result.transform.payload.email": "foo@bar.org" }
 
   - do:
-    put_script:
-      lang: transform-script
-      body: >
-        {
-          "script":
+      put_script:
+        lang: transform-script
+        body: >
           {
-            "lang": "painless",
-            "code":"return [ 'email': 'foo@example.org' ]"
+            "script":
+            {
+              "lang": "painless",
+              "code":"return [ 'email': 'foo@example.org' ]"
+            }
           }
-        }
 
   - do:
       xpack.watcher.execute_watch:
@@ -81,20 +81,20 @@
       features: warnings
 
   - do:
-    cluster.health:
-      wait_for_status: yellow
+      cluster.health:
+        wait_for_status: yellow
 
   - do:
-    put_script:
-      lang: condition-script
-      body: >
-        {
-          "script":
+      put_script:
+        lang: condition-script
+        body: >
           {
-            "lang": "painless",
-            "code": "return false"
+            "script":
+            {
+              "lang": "painless",
+              "code": "return false"
+            }
           }
-        }
 
   - do:
       xpack.watcher.put_watch:
@@ -133,15 +133,15 @@
   - match: { "watch_record.result.condition.met": false }
 
   - do:
-    put_script:
-      lang: condition-script
-      body: >
-        {
-          "script": {
-            "lang": "painless",
-            "code": "return true"
+      put_script:
+        lang: condition-script
+        body: >
+          {
+            "script": {
+              "lang": "painless",
+              "code": "return true"
+            }
           }
-        }
 
   - do:
       xpack.watcher.execute_watch:
diff --git a/qa/smoke-test-watcher-with-security/src/test/resources/rest-api-spec/test/watcher/watcher_and_security/10_insufficient_privs.yaml b/qa/smoke-test-watcher-with-security/src/test/resources/rest-api-spec/test/watcher/watcher_and_security/10_insufficient_privs.yaml
index 30b7d332e25..8903fac1198 100644
--- a/qa/smoke-test-watcher-with-security/src/test/resources/rest-api-spec/test/watcher/watcher_and_security/10_insufficient_privs.yaml
+++ b/qa/smoke-test-watcher-with-security/src/test/resources/rest-api-spec/test/watcher/watcher_and_security/10_insufficient_privs.yaml
@@ -1,12 +1,12 @@
 ---
 "Test watcher is protected by security":
   - do:
-    headers: { es-security-runas-user: powerless_user }
-    catch: forbidden
-    xpack.watcher.stats: {}
+      headers: { es-security-runas-user: powerless_user }
+      catch: forbidden
+      xpack.watcher.stats: {}
   # there seems to be a bug in the yaml parser we use, where a single element list
   # has the END_LIST token skipped...so here we just rerun the same request without
   # the impersonation to show it works
   - do:
-    xpack.watcher.stats: {}
+      xpack.watcher.stats: {}
   - match: { watcher_state: started }