I'd like to be able to run reports on user email accounts by IP address. Just recently, I had a customer posit that he believes someone might be accessing his email via POP/IMAP but not deleting anything. Sure, the server logs record all kinds of data but it is difficult to sift through the logs for certain types and amounts of data. We're still on SM11.x so I can't compare to SM13 but under the "view logs" option I can only search one date at a time.
Suppose I wanted to audit an account and see a list of IP addresses which have successfully (or unsuccessfully) logged into an account over the past month. There is no easy way to do this.
I think it is a good idea. Make it so. :)