The context of the logs that are published in both are looking Identical but the logs are different. All I can see is this documentation. Can someone give a proper difference between the both?
STREAMING STORAGE POLICY ApiEventStream ApiEvent ApiEvent LightningUriEventStream LightningUriEvent n/a ListViewEventStream ListViewEvent ListViewEvent LoginAsEventStream LoginAsEvent n/a LoginEventStream LoginEvent LoginEvent LogoutEventStream LogoutEvent n/a ReportEventStream ReportEvent ReportEvent UriEventStream UriEvent n/a
Real-time event monitoring supports Transaction Security Policies so you can, for example, block the export of report data for sensitive objects.
Real-time event monitoring uses a different data storage mechanism (Big Objects) than the "original" Shield Event Monitoring which uses
EventLogFile object and were/are intended for consumption by 3rd party logging systems like Splunk or Sumo Logic (although can also be analyzed by the Shield-included Event Monitoring app)