I need to filter some "bad" connections to server and this connection are not caught by client_connect or client_connecting or client_authorized. These connections are seen in server log only...
So if it is not possible to catch it with logevent then... don't know what then.