#Oracle backported in #CPU Oct #2023 the SOURCE column in #UNIFIED_AUDIT_TRAIL from 23c to #19.21. It is no longer necessary to use the abused column #XS_SESSIONID.

Source:
* FILE - os spillover files in each database instance
* DATABASE - records from the AUDSYS.AUD$UNIFIED table