general question, how quickly should something show up in an osquery taable?

Most osquery tables are generated at the time of the query. So results will show up immediately. Tables that end with "_events" have events stored in an internal store. Those will also be available essentially immediately.