← Perspectives

Data Engineering

Real-Time Analytics: The New Baseline

Batch was the default. Now real-time is expected. How streaming architectures became table stakes for modern enterprises.9 min read

Five years ago, "real-time analytics" was a competitive differentiator—something only the most sophisticated organizations attempted. Today, it's table stakes. Users expect dashboards that update instantly, alerts that fire in seconds, and AI that responds to current conditions. The batch-first era is ending.

The Expectation Shift

The shift wasn't gradual—it was generational. Consumer applications trained users to expect immediacy. When your ride-share app shows the car moving in real-time, waiting until tomorrow for business metrics feels archaic. When fraud detection takes hours, millions are already lost.

Enterprise expectations followed consumer norms. Executives who refresh their personal stock portfolios in real-time won't accept T+1 operational reports. Operations teams that monitor home security cameras instantly won't tolerate batch alerting. The bar has permanently moved.

78%
expect sub-minute data freshness
growth in streaming adoption since 2022
$2.1M
average cost of delayed fraud detection

The Evolution of Data Latency

2015
Era
Nightly Batch
2018
Era
Hourly Refresh
2021
Era
Near Real-Time
2025
Era
Streaming-First

Each era brought new expectations and new architecture patterns. Organizations still running nightly batch aren't just behind—they're operating with a fundamental disadvantage in markets where speed matters.

The Streaming Architecture

Real-time analytics requires rethinking how data flows through your organization. The traditional pattern—extract, load, transform, report—assumes data at rest. Streaming assumes data in motion.

Modern Streaming Architecture SOURCES Applications IoT Devices Databases (CDC) Clickstream Message Bus Kafka / Kinesis Pulsar / EventHub Stream Processing Flink / Spark Streaming ksqlDB / Materialize Hot Storage Redis / DynamoDB Cold Storage Data Lake / Warehouse CONSUMERS Real-Time Dashboards Alerting Systems ML Model Serving Operational Apps Event-Driven APIs < 1 second < 5 seconds < 100ms < 1 second < 50ms Data flows continuously from sources through processing to consumers—no batch boundaries.

Figure 1: A modern streaming architecture enables sub-second latency from event generation to insight delivery.

The Technology Landscape

The streaming ecosystem has matured dramatically. What once required armies of engineers now comes off the shelf—though the choice of tools still matters enormously.

Category Options Best For
Message Bus Kafka, Kinesis, Pulsar, EventHub Event ingestion and distribution
Stream Processing Flink, Spark Streaming, ksqlDB Transformations, aggregations, joins
Streaming Databases Materialize, RisingWave, Timeplus SQL over streams
Real-Time OLAP ClickHouse, Druid, Pinot, StarRocks Sub-second analytical queries
Feature Serving Feast, Tecton, Feathr ML feature computation and serving

The Kafka Dominance

Apache Kafka has become the de facto standard for enterprise event streaming. Its durability guarantees, scalability, and ecosystem integration make it the safe choice. Managed offerings from Confluent, AWS (MSK), and Azure (Event Hubs with Kafka API) have removed operational burden.

When Kafka Isn't the Answer

Kafka excels at high-throughput, durable event streaming. For simpler pub/sub needs, AWS SNS/SQS or Google Pub/Sub offer lower operational overhead. For edge computing or IoT with limited connectivity, MQTT-based solutions may be more appropriate.

The Operational Analytics Revolution

Perhaps the most significant shift is the rise of "operational analytics"—analytics embedded directly into operational workflows rather than relegated to reporting dashboards viewed after the fact.

Consider fraud detection: batch analytics tell you what happened yesterday; operational analytics stop the fraudulent transaction before it completes. Consider inventory management: batch analytics show you were out of stock; operational analytics trigger reorders before shelves empty.

We used to build dashboards for humans to watch. Now we build real-time systems that take action. The dashboard is just the audit trail.

— Head of Data Platform, E-commerce Company

The Kappa Simplification

The Lambda architecture—maintaining separate batch and streaming pipelines—dominated early real-time implementations. The complexity was brutal: two codebases, two sets of bugs, constant reconciliation challenges.

The Kappa architecture simplifies: streaming is the only path. Historical analysis replays from the stream log. The same processing logic handles both real-time and historical queries. One codebase, one source of truth.

In practice, most organizations land somewhere between: streaming for recent data, batch for historical backfills and cost efficiency. The key insight is designing for streaming first, with batch as an optimization rather than a separate system.

Real-Time for AI

AI workloads increasingly demand real-time data. Recommendation engines need to respond to user behavior immediately. Fraud models must score transactions before approval. Personalization requires current context, not yesterday's snapshot.

This creates new infrastructure requirements: feature stores that serve fresh features with low latency, embedding pipelines that process new content continuously, and model serving that scales with traffic spikes.

Real-Time Requirements by AI Use Case

  • Fraud detection: Sub-100ms scoring during transaction authorization
  • Recommendations: Current session context in <50ms for page renders
  • Dynamic pricing: Market conditions updated every few seconds
  • Anomaly detection: Infrastructure metrics processed in real-time
  • Personalization: User behavior reflected within single session
  • Chatbots/RAG: Recent interactions available immediately for context

The Cost Reality

Real-time isn't free. Streaming infrastructure costs more than batch—you're paying for always-on compute, higher throughput storage, and more complex operations. The question isn't whether real-time costs more, but whether the value justifies the cost.

For fraud prevention, sub-second detection easily justifies the infrastructure. For monthly board reports, real-time is overkill. The mature approach: real-time where latency creates value, batch where it doesn't.

Right-Sizing Latency

Not everything needs millisecond latency. A useful framework: what decisions does this data inform, and how quickly must those decisions be made? Match latency requirements to business need, not technical ambition.

Getting Started

Organizations transitioning from batch-first to streaming-first face a common challenge: where to begin? The answer is almost always a single, high-value use case rather than platform-wide transformation.

Pick a use case where real-time creates clear business value—fraud detection, inventory alerts, customer experience personalization. Build the streaming infrastructure for that use case. Learn operational patterns. Then expand.

Reflecting on This Series

Over four articles, we've traced the evolution of enterprise data engineering from modern stack adoption through architectural debates to AI readiness and now real-time expectations. The thread connecting them: data engineering has moved from back-office infrastructure to business-critical capability.

The modern data stack matured, providing reliable foundations. Data mesh challenged us to think about ownership and scale. AI-ready requirements pushed us toward new patterns for quality and accessibility. Real-time expectations set the new performance bar.

What comes next? The boundaries between analytics, operations, and AI continue blurring. Data platforms become less about storing and reporting, more about enabling intelligent, automated action. The organizations that thrive will be those where data flows seamlessly from event to insight to action—in real-time.