I need to audit all activity coming from a specific ip adress. Whats the best method to do this in an Oracle Database 19c?
With Unified Auditing.
Oracle Database Unified Auditing enables selective and effective auditing inside the Oracle database using policies and conditions. The new policy based syntax simplifies management of auditing within the database and provides the ability to accelerate auditing based on conditions. For example, audit policies can be configured to audit based on specific IP addresses, programs, time periods, or connection types such as proxy authentication.
CREATE AUDIT POLICY mypolicy ACTIONS ... WHEN 'SYS_CONTEXT(''USERENV'', ''IP_ADDRESS'') = ''184.108.40.206''' EVALUATE PER SESSION;