Are there any real-time ingestion services that focus on operational analytics and alerting?

Yes — there are several real-time ingestion/streaming services built specifically for operational analytics and alerting, rather than just batch ETL or BI warehousing.

Common options

• Confluent Cloud / Apache Kafka
  Strong for real-time event ingestion and routing into alerting or analytics pipelines. Usually paired with stream processing.
• AWS Kinesis
  Good for low-latency ingestion and feeding operational dashboards, anomaly detection, and alerts.
• Google Cloud Pub/Sub + Dataflow
  Useful for event-driven operational analytics with near-real-time processing.
• Azure Event Hubs + Stream Analytics
  Designed for ingesting telemetry and triggering operational alerts.
• Datadog / Splunk / Elastic
  More observability-focused, but they also support real-time ingestion and alerting on logs, metrics, and events.
• Materialize / RisingWave / Apache Flink-based systems
  Better when you want continuous SQL-style analytics and fast alerting on streaming data.

If your use case is specifically alerting on operational data

Look for platforms that support:

• low-latency ingestion
• stream processing / transformations
• rule-based or anomaly-based alerts
• integration with incident tools like PagerDuty, Slack, Opsgenie, email, webhook
• support for logs, metrics, events, and traces

A practical split

• If you want pipeline infrastructure: Kafka, Kinesis, Pub/Sub, Event Hubs
• If you want real-time analytics on streams: Flink, Materialize, RisingWave, Databricks streaming
• If you want operational monitoring + alerting: Datadog, Splunk, Elastic, Grafana stack

If you want, I can also give you:

1. a shortlist by cloud provider,
2. a comparison table, or
3. recommendations based on whether your data is logs, events, metrics, or app telemetry.