Fix elf.sections mapping to nested

[aleksmaus]

What does this PR do?

Fixed the elf.sections mapping to make it nested.

Before this change:

 "elf": { "properties": { "creation_date": { "type": "date" }, "header": { "properties": { "entrypoint": { "type": "long" } } }, "sections": { "properties": { "chi2": { "type": "long" }, "entropy": { "type": "long" }, "physical_size": { "type": "long" }, "virtual_address": { "type": "long" }, "virtual_size": { "type": "long" } } } } } 

After the change (note the "type": "nested",:

{ "elf": { "properties": { "creation_date": { "type": "date" }, "header": { "properties": { "entrypoint": { "type": "long" } } }, "sections": { "type": "nested", "properties": { "chi2": { "type": "long" }, "entropy": { "type": "long" }, "physical_size": { "type": "long" }, "virtual_address": { "type": "long" }, "virtual_size": { "type": "long" } } } } } } 

Checklist

• I have reviewed tips for building integrations and this pull request is aligned with them.
• I have verified that all data streams collect metrics or logs.
• I have added an entry to my package's changelog.yml file.
• I have verified that Kibana version constraints are current according to guidelines.

Related issues

• Closes https://github.com/elastic/sdh-beats/issues/3538

[elasticmachine]

💚 Build Succeeded

the below badges are clickable and redirect to their specific view in the CI or DOCS

Expand to view the summary

Build stats

• Start Time: 2023-06-30T19:01:20.595+0000

• Duration: 14 min 37 sec

Test stats 🧪

Test	Results
Failed	0
Passed	16
Skipped	0
Total	16

🤖 GitHub comments

Expand to view the GitHub comments

To re-run your PR in the CI, just comment with:

• /test : Re-trigger the build.

[elasticmachine]

💚 Build Succeeded

the below badges are clickable and redirect to their specific view in the CI or DOCS

Expand to view the summary

Build stats

• Start Time: 2023-06-30T19:02:20.619+0000

• Duration: 13 min 38 sec

Test stats 🧪

Test	Results
Failed	0
Passed	16
Skipped	0
Total	16

🤖 GitHub comments

Expand to view the GitHub comments

To re-run your PR in the CI, just comment with:

• /test : Re-trigger the build.

[elasticmachine]

🌐 Coverage report

Name	Metrics % (covered/total)	Diff
Packages	100.0% (0/0)	💚
Files	100.0% (0/0)	💚
Classes	100.0% (0/0)	💚
Methods	25.0% (1/4)	👎 -65.476
Lines	100.0% (0/0)	💚 2.703
Conditionals	100.0% (0/0)	💚

[elasticmachine]

🌐 Coverage report

Name	Metrics % (covered/total)	Diff
Packages	100.0% (0/0)	💚
Files	100.0% (0/0)	💚
Classes	100.0% (0/0)	💚
Methods	25.0% (1/4)	👎 -65.476
Lines	100.0% (0/0)	💚 2.703
Conditionals	100.0% (0/0)	💚

[elasticmachine]

Package osquery_manager - 1.7.4 containing this change is available at https://epr.elastic.co/search?package=osquery_manager