Use real-time logs for alerting, incident response, and interactive dashboards where immediate visibility matters. Use batch logs for historical analysis, cost optimization studies, and compliance reporting where latency is less critical.