diff --git a/x-pack/plugins/security/server/config_deprecations.ts b/x-pack/plugins/security/server/config_deprecations.ts
index 65d18f0a4e7eb..b69504ee3138e 100644
--- a/x-pack/plugins/security/server/config_deprecations.ts
+++ b/x-pack/plugins/security/server/config_deprecations.ts
@@ -12,6 +12,13 @@ export const securityConfigDeprecationProvider: ConfigDeprecationProvider = ({
   unused,
 }) => [
   rename('sessionTimeout', 'session.idleTimeout'),
+
+  rename('audit.appender.kind', 'audit.appender.type'),
+  rename('audit.appender.path', 'audit.appender.fileName'),
+  rename('audit.appender.layout.kind', 'audit.appender.layout.type'),
+  rename('audit.appender.policy.kind', 'audit.appender.policy.type'),
+  rename('audit.appender.strategy.kind', 'audit.appender.strategy.type'),
+
   unused('authorization.legacyFallback.enabled'),
   unused('authc.saml.maxRedirectURLSize'),
   // Deprecation warning for the old array-based format of `xpack.security.authc.providers`.