OK so I'm having an issue where ArcSight thinks we are over our license when we are not.
I cleaned up the session list the Licensing Report uses but that does not affect the login prompt.
How do I check how it is collecting that information and how do I fix it?
The licensing complaint is based on total number of users, it has nothing to do with the session list report. Depending on what your license entitlement is for you can re-classify some users as webusers to drop the total number of console users. Not really enough information here to provide any advice, some screenshots would be helpful
ESM console license based on how many logins. So how many arcsight users have you created? if it has exceeds the limit then prompt the user limit has exceed notification.