How long does it take for the map to populate with events?

Map data is updated only upon the user account's next successful login after the user's company is onboarded to SaaS Alerts.  This can also vary by application.

 

We do use a third party to correlate IP addresses to Lat/Long and Region, Country, and City values.  However, this does not introduce delay.  The longest delay in seeing map data is when users do not log out of apps which will allow them to remain logged in persistently.

We will be updating the Map data more often in an upcoming release.  Since we've discovered that many users of Microsoft products don't log out of their environments for days at a time, we will be introducing map updates triggered by many more activity types.