Yes. Apache Flink ships a native Iceberg sink that commits micro-batches as snapshots on each checkpoint interval, typically ranging from seconds to a few minutes. Downstream consumers can perform incremental reads by requesting only snapshots newer than a given ID, which makes Iceberg viable for near-real-time observability pipelines. For sub-second latency requirements, teams usually pair Iceberg with a hot-path streaming store and use Iceberg as the durable archival tier.