Yeah good one.
Processes come and go so need to be quick.
And if its an intermediate process that is doing the killing, ps -e is not going to show it might not show it.
It could very well have been service itself (root UID since you used sudo service ...). Since it will immediately be over, there is like zero chance to detect it.