It has many useful features such as application correlation which helps in tracing of threats back till its source.
The UI could be improved by adding some more icons for various functions like network mapping etc., Also I don't think there should have been any changes at all since last year! We were looking out something that would help us understand what was happening inside our infrastructure so we can take corrective action quickly when needed without having to go through logs manually or wait until someone else looks into them first (as they do now).