Assuming JSESSIONID is auto-extracted, run the following REAL-TIME search (choose your window, I typically go with 5 minutes):

sourcetype="iis" | stats dc(JSESSIONID)