Hi Terrance,
are you using more then one application server where FF ID are doing log on? Those 4 EAM accounts maybe assigned to different log-on group and are being log in to server were audit logs are not enabled for example or are not gathered to GRC server.
Filip