The licensing complaint is based on total number of users, it has nothing to do with the session list report. Depending on what your license entitlement is for you can re-classify some users as webusers to drop the total number of console users. Not really enough information here to provide any advice, some screenshots would be helpful
ESM console license based on how many logins. So how many arcsight users have you created? if it has exceeds the limit then prompt the user limit has exceed notification.