detect/entropy: Clarify when entropy is logged

Clarify when entropy values are logged and associated with non-alert log
records.

doc/userguide/rules/payload-keywords.rst

@@ -737,10 +737,11 @@ Logging
 ~~~~~~~
 
 When the ``entropy`` rule keyword is provided and the rule is evaluated, the
-`calculated entropy` value is logged within the ``metadata`` section of an
+`calculated entropy` value is associated with the flow even if the calculated
-output log. If the alert matched, it will be included there; here's an example
+entropy value didn't result in a match or alert. Subsequent logging of event
-that shows the calculated entropy value with the buffer on which the value was
+types that include the flow, including alerts, will contain the ``entropy`` value in
-computed::
+the ``metadata`` section of an output log. The follow is an example that shows
+the calculated entropy value with the buffer on which the value was computed::
 
      "metadata": {
         "entropy": {