There is an easier and more convenient way to do this instead of the firewall rules logging. Take a look at the script I wrote for this: Logging WireGuard peer connects and disconnects
My approach logs the actual peer name, doesn’t depend on keepalives being set, and also logs (pseudo)-disconnects.