I want to find out the module with which program an audit has started.
So for example if an insert statement has been done with SQL developer or Toad.
I have the logging of the statement in dba_fga_audit_trail
But I can't seem to find the link to the audsid so I can find more info about the session.
Is it possible to create this link by joining some tables?
SESSION_ID of dba_fga_audit_trail indicates the audit session ID number. It is indeed the session ID that you can also find by querying the AUDSID column in the v$session table. Nevertheless you should know that v$session displays session information for each current session, not past ones, so if you are interested in getting such information for past events, you just can't have it. Having said that, there is a way to get the client program where an event has occurred (f.e: SQL Developer), by using an Oracle product, Audit Vault and Database Firewall. In the audit report you can get fairly easily this kind of information.