NetSuite 2026.2 October Monthly Release: Event Subscriber Scripts, N/llm reRank, Standardized Bank Error Codes, and REST Batch Enhancements

SuiteScript

New Event Subscriber Script Type

A new script type, Event Subscriber, enables asynchronous follow-up logic after record create, update, or delete events. Unlike User Event afterSubmit, these scripts execute after the originating transaction completes, so they never block the user or add latency to the record operation.

• Entry point: handle(options) in a SuiteScript 2.1 module.
• SDF object: eventsubscriber — subscription criteria (record type, event type, filters) are configured declaratively in the SDF definition, not in the script.
• Governance: 1,000 usage units per execution.
• Time limit: 300 seconds (5 minutes).

This is a significant addition to the script-type roster. If you currently run heavy post-save logic in afterSubmit (e.g., syncing to external systems, cascading record updates, or queueing map/reduce jobs), Event Subscriber scripts may be a cleaner, lower-risk replacement.

N/llm Module — llm.reRank()

Two new methods are available:

• llm.reRank(options) (synchronous)
• llm.reRank.promise(options) (asynchronous)

Both accept an array of document strings and a prompt, returning document indexes and relevance scores sorted by rank. They do not return the document text or generate answers — this is a pure relevance-ranking utility.

• Default behavior: returns the single highest-ranked document. Set options.topN to return more.
• Model enum: llm.ReRankModelFamily — currently exposes cohere.rerank-v4.0-fast.

Useful for RAG pipelines or custom search implementations built on top of SuiteScript where you need to narrow a candidate set before passing context to an LLM.

File Cabinet Access Controls for Custom Tools

Administrators can now configure Allowed File Cabinet Access on the Custom Tools page. This is an account-wide setting that grants View, Create, or Edit access to specific folders (and their subfolders) during custom tool execution.

• Applies to N/file operations within custom tools, including File Cabinet MCP Apps.
• An empty list blocks all file read/create/update from custom tools.
• Standard NetSuite role permissions still apply on top of these controls.
• Does not restrict N/file usage outside custom tool execution (normal SuiteScript is unaffected).

Banking — Standardized Error Codes for Connectivity Plug-ins

If you maintain a Financial Institution Connectivity Plug-in, new standardized error codes must be returned for specific failure scenarios. Update your plug-in to set the appropriate code:

• 2000001400 — Account data unavailable (provider retrieval failure)
• 2000001500 — Required account data unavailable (incomplete data)
• 2000001600 — Connection provider access blocked (FI blocking provider)
• 2000001700 — Connection session ended (reauthentication needed)
• 2000001800 — Financial institution temporarily unavailable
• 2000001900 — Bank connection refresh temporarily unavailable
• 2000002000 — Bank connection refresh limit reached
• 0000000400 — Bank connection setup unavailable (missing credential)
• 0000000401 — Bank connection registration failed

Additionally, when MFA reauthentication is required, NetSuite now stops automatic import attempts for the affected account and sends a single notification email instead of repeated error notifications. A persistent banner on the Match Bank Data page surfaces accounts needing MFA.

SuiteTalk / REST Web Services

Source Request Link in Async Batch Results

Each task result in an asynchronous REST batch operation now includes a "rel": "request" link pointing to a serialized JSON object containing the original request body, HTTP method, and URL. This lets you correlate batch responses not just by task ID but by the exact endpoint that was called — helpful for debugging and audit logging in integrations that submit mixed-endpoint batches.

SuiteAnalytics

ODBC Driver 9.0.37.0 for Linux

Available as of October 19, 2026. Updates OpenSSL to 3.5.7 with security fixes. Download from Settings > Set Up SuiteAnalytics Connect in NetSuite.

Supply Chain Planning Engine Workbook

A new pre-built SuiteAnalytics workbook is available at Analytics > Workbooks > Supply Chain Planning Engine Workbook. It contains two tables:

• Planned Order Analysis — supply, pegged demand, item-location planning parameters explaining planned-order quantities and dates.
• Planning Engine Messages — action details including dates, quantities, related planning orders and supply change orders.

Results are from the latest supply planning run per supply plan definition. Filterable by supply plan definition, item, and location.

CRM

AI Similar Cases

A new Similar Cases tab appears when you click Generate Insight on a support case. It returns up to five resolved (Closed status) cases ranked by AI similarity score, analyzing case subject, metadata, and the first message by meaning/context rather than keyword matching. Note: only cases closed after October 7, 2026 are indexed. Requires Support Case - View permission.

MCP Server Permissions for Specialized User: CRM

The Specialized User: CRM role can now be customized to use the NetSuite AI Connector Service (MCP). The following permissions must be set to Full:

• MCP Server Connection
• Log in using OAuth 2.0 Access Tokens
• REST Web Services

All default to None — grant only when needed.

SuiteBuilder — AI Description Validation

NetSuite now validates AI descriptions on custom fields, custom record types, custom transaction types, and ARC overrides. Invalid descriptions are not used by AI features until corrected. Descriptions deployed via SDF, bundles, or SuiteApps are validated post-install/update (validation does not block deployment). A new AI Description for Segment Applications field is available on Custom Segment definitions, and you can now add AI descriptions to the custom record type backing a custom segment's values.

Other Notable Changes

• Vendor Consigned Inventory for WMS — the WMS app now supports consigned inventory items. Inbound Shipment Receiving, Inventory Transfers, Work Order Picking, and Build Assembly are not yet supported on mobile. Consigned and non-consigned quantities can share a bin if the item allows it.
• Item Creation Assistant — now supports batch editing of item candidates during review, with validation warnings displayed before creation.
• Saved Search via Ask Oracle — natural-language saved search creation is available for NetSuite Next accounts.
• CFO Insights Report Configurations — Labor Costs and Labor Costs & Revenue reports now support multiple named configurations controlling which payroll components are included.

What to Do

1. Financial Institution Connectivity Plug-in developers: Review the new standardized error codes (2000001400–2000002000, 0000000400–0000000401) and update your plug-in to return the correct code for each error scenario.
2. SuiteScript developers: Evaluate the new Event Subscriber script type as a replacement for heavy afterSubmit logic. Note the 1,000 governance unit limit and 300-second timeout. You will need to create an eventsubscriber SDF object to define subscription criteria.
3. AI/LLM integrators: If you use the N/llm module, test llm.reRank() with cohere.rerank-v4.0-fast for document ranking use cases.
4. Custom Tool developers: If your custom tools use N/file, an administrator must now explicitly grant folder-level access on the Custom Tools page. An empty allow-list means no file operations are permitted during custom tool execution.
5. REST integration developers: If you use async batch operations, update your response-parsing logic to take advantage of the new "rel": "request" link for request correlation.
6. Linux ODBC users: Upgrade to driver version 9.0.37.0 for OpenSSL 3.5.7 security fixes.
7. Administrators granting MCP access to CRM roles: The three required permissions (MCP Server Connection, OAuth 2.0 Access Tokens, REST Web Services) all default to None — explicitly set to Full only for users who need AI Connector access.
8. SDF/Bundle publishers: AI descriptions on custom objects are now validated post-deployment. Ensure descriptions meet validation requirements to avoid them being silently ignored by AI features.