It would be greatly appretiated to have access log for different features (VNC, samba, web UI). I know some can be probably read from syslog, but at least for the VNC, I haven't seen anything there.
The use case for me is that I have had a security issue where somebody logged into my VM using VNC and while I managed to catch that pretty soon (for that specific session), I am not sure whether it is possible he logged in at some other point in the past.
VNC log would help greatly in this case.