Both approaches are possible. CloudFront real-time logs stream with second-scale latency, while Cloudflare Logpush delivers batched data as it becomes available. Real-time observability helps with incident response, while batch processing is ideal for trend analysis and reporting.