That's correct. The `equals` condition does not currently have support for a string array value. It has support for int, string, and bool. You can see the source code [here](https://github.com/elastic/beats/blob/81fa63625fc39f93f625fc65227e089e1d0a2bcf/libbeat/conditions/equals.go#L40-L56)

---