Logging or statting Auth Basic on Ubuntu 14.04

do you mean the HTTP “WWW-Authenticate: Basic” / “Authorization: Basic” ? If yes, in Nginx you can find the username inside the access_log for each request. I usually grep the username inside the log and count how many times it request the / page.

For example, if i want to know how many times and when the admin user logged in:

# cat logs/access.log | egrep '[0-9\.]+ \- admin .*GET \/ HTTP'
1.2.3.4 - admin [02/Dec/2015:16:44:01 +0100] "GET / HTTP/1.1" [...]
1.2.3.4 - admin [02/Dec/2015:16:44:46 +0100] "GET / HTTP/1.1" [...]

then i use awk to print the timestamp only

# cat logs/access.log | egrep '[0-9\.]+ \- admin .*GET \/ HTTP' | awk '{print $4 $5}'
[02/Dec/2015:16:44:01+0100]
[02/Dec/2015:16:44:46+0100]

then i use sort and uniq to count it

# cat logs/access.log | egrep '[0-9\.]+ \- admin .*GET \/ HTTP' | awk '{print $4 $5}' | sort | uniq -c
      1 [02/Dec/2015:16:44:01+0100]
      1 [02/Dec/2015:16:44:46+0100]

hope this help :)

Exactly! My access log is in /var/logs/nginx/access.log though - embarrassing i overlooked the username in there. Thank you so much for getting me in the right direction! :)