have you done the date/time format thing under mapping? and do a event streaming to see if events are arriving in real time.
I'm intrested if you found a solution?!if yes.. what was the Problem \ Solution ?!
Download the new ePolicy Orchestrator (ePO) Support Center Extension which simplifies ePO management and provides support resources directly in the console. Learn more about ePO Support Center