You should ingest and index CDN logs in real time for alerting on immediate issues like DDoS attacks or error spikes. For deeper analysis, like capacity planning or trend identification, reviewing aggregated log data on a weekly or monthly basis is recommended. For major events, such as yearly sales (for retail businesses) or live streaming (broadcasting), CDN log analytics should be a critical component of your observability.