Yes, but it requires purpose-built streaming infrastructure. Standard batch processing introduces hours of delay that make incident response impossible. Real-time CDN log analytics from CloudFront via Kinesis or direct HTTP streaming from other providers enable sub-second visibility into ongoing events.