mcafee epo 4.6 only pulling administrative logs not threat or virus ones
yes. Both system and virus odbc are added:
%NIC-6-605113: ODBC, ODBC, -, -, -, -, Detail: 2628: ePolicy_virus:envision:Events=0; Query=0.024 s; Execute=0.024 s; Fetch=0.000 s; Total=0.177 s; Eps=0.000; Rps=0.000
but the virus one only returns Events=0 after every connection.
Should be a tracking file for your ePolicy_Virus collection. What's inside this file?
Also, what "Type" did you select for your ODBC definition within enVision?
Try changing your type for the Virus data source to "ePolicyVirus4.5AutoId".
You will have to remove/rename the existing last file with the old tracking data in; restarting the NIC ODBC Service re-creates this file with the new tracking info.