Delay - In A potentially malicious URL click was detected alert generating and action

Hi there, I received a delay of 12 hours between the action being undertaken in O365 and the alert flagging in defender alerts. It also took 12 hours to log in audit logs. Can you anyone provide any further information on how this could be happening?