diff --git a/x-pack/docs/en/settings/audit-settings.asciidoc b/x-pack/docs/en/settings/audit-settings.asciidoc
index 14e5d6fa28f46..6274fae790b8c 100644
--- a/x-pack/docs/en/settings/audit-settings.asciidoc
+++ b/x-pack/docs/en/settings/audit-settings.asciidoc
@@ -121,7 +121,9 @@ To index audit events to a remote {es} cluster, you configure the following
 
 `xpack.security.audit.index.client.hosts`::
 Specifies a comma-separated list of `host:port` pairs. These hosts should be
-nodes in the remote cluster.
+nodes in the remote cluster. If you are using default values for the 
+<<common-network-settings,`transport.tcp.port`>> setting, you can omit the 
+`port` value. Otherwise, it must match the `transport.tcp.port` setting. 
 
 `xpack.security.audit.index.client.cluster.name`::
 Specifies the name of the remote cluster.