Yeah, I remember talking about this a bit and thinking/agreeing that a group-specific audit log would be much less useful than a tenant-based audit log.