Not sure if there is a way to do this already, but there doesn't appear to be.
We access our Orion web interface via a load balancer, so the audit trail shows the same source IP address for all connections.
Looks like to resolve this we'd need a way to have it look at the x-forwarded-for field to get the client IP.
