Google API fun and games - Question from a newbie!

Thanks to being at home more due to COVID-19, I thought I would have a mess with the Google APIs with a bit of Python. I am looking to keep an eye on IP addresses logging into GSuite email accounts to help spot compromised accounts a little quicker.

I am using Python and have connected to the report API and I get results back but they don’t update with every login / logout.

I have logged into the GSuite admin account, checked the report function and the results are the same.

If, in a separate browser, I log into another account that doesn’t instantly show up on the report - does anyone know if these should update immediately or are they only updated periodically?

If it is only periodically through the report API, does anyone know how to get login IP addresses in real time from Google instead?

Thanks and have a good weekend.

Keep safe!