...
You can see a realtime user count in the Realtime User Count report, which lists concurrent hosts and daily users on all realtime servers for every day usage is monitored. From this report, you can access a 14-day history of all usernames and hostnames that used monitored licenses for any given date. For example, if you view the 14-day user history for 2012/03/31, you will see the usage details for 2012/03/16 through 2012/03/31. The number of rows in the 14-day history can be used to determine your needs for License Statistics licensing.
Importing of denial logs is licensed under Realtime licensing, and the user count is tracked using the same method. Other imported usage is licensed separately, and tracked as detailed below.
See Realtime User Count report for further information about viewing realtime usage history.
...