In most cases, if the source was not in DNS and then was added, the change should be as soon as the DNS change propagates through the DNS servers (i.e. as soon as Log Insight is able to resolve the IP).
Just to confirm, this is for the source field and not the hostname field right?