From fd54ed328c4ed3a1e9aea2ca9149d2ef75d027df Mon Sep 17 00:00:00 2001
From: Albert Zaharovits <albert.zaharovits@elastic.co>
Date: Wed, 20 May 2020 16:34:00 +0300
Subject: [PATCH] DOCS Correct audit emit_node_id default value as false
 (#56995)

Since version 7, the `xpack.security.audit.logfile.emit_node_id` setting defaults
to `false`, yet the docs say otherwise. This commit fixes that.
---
 docs/reference/settings/audit-settings.asciidoc | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/docs/reference/settings/audit-settings.asciidoc b/docs/reference/settings/audit-settings.asciidoc
index b9da9786598..b4b3f6924b1 100644
--- a/docs/reference/settings/audit-settings.asciidoc
+++ b/docs/reference/settings/audit-settings.asciidoc
@@ -45,8 +45,7 @@ audited in plain text when including the request body in audit events.
 
 `xpack.security.audit.logfile.emit_node_name`::
 Specifies whether to include the <<node.name,node name>> as a field in
-each audit event.
-The default value is `true`.
+each audit event. The default value is `false`.
 
 `xpack.security.audit.logfile.emit_node_host_address`::
 Specifies whether to include the node's IP address as a field in each audit event.