has anyone ever heard of a multi-hour delay between a failed login attempt and NetSuite's login audit trail? i would have expected this to be real time like any other NS logs and system notes, but someone's demonstrating to me that there's in fact a delay. granted it's in sandbox, but still unexpected.

Could be timezone differences confusing matters…

great idea. in this case it's an actual delay. as in - check the log immediately after the failed login, and it's not there. check the log again hours later, it's there.