From a90bc9dba9befbceb1d371f3c97e6f5c11b183d5 Mon Sep 17 00:00:00 2001
From: weslambert <wlambertts@gmail.com>
Date: Fri, 14 Jan 2022 16:58:53 -0500
Subject: [PATCH] Add mapping for scan.pe.sections.entropy

---
 .../templates/so/so-common-template.json.jinja      | 13 ++++++++++++-
 1 file changed, 12 insertions(+), 1 deletion(-)

diff --git a/salt/elasticsearch/templates/so/so-common-template.json.jinja b/salt/elasticsearch/templates/so/so-common-template.json.jinja
index b61f3764d..b5f196243 100644
--- a/salt/elasticsearch/templates/so/so-common-template.json.jinja
+++ b/salt/elasticsearch/templates/so/so-common-template.json.jinja
@@ -734,7 +734,18 @@
 	  "properties":{
             "exiftool":{
               "type":"text"
-             }
+             },
+	     "pe":{
+	       "properties":{
+	         "sections":{
+		   "properties":{
+		     "entropy":{
+		       "type": "float"
+		     }
+		   }
+		 }
+	       }
+	     }
           }
         },
         "server":{