change Timestamp format

[Invictus96]

Hi,
I got the following timestamp format in elasticsearch:
@timestamp 26.01.2018 15:52:55

The Timestamp that will be send from Elastalert via email is the following:
Timestamp: 2018-01-26T15:52:55Z

Now I want to change the format from Elastalert to the elasticsearch timestamp. To do this I made those configurations in the rule:

timestamp_field: timestamp
timestamp_type: custom
timestamp_format: "%d.%m.%Y %H:%M:%S"

But no email is send anymore.

[Qmando]

You can set use_local_time: true which will make the timestamp in the subject of the email localized. I don't think it will affect the body of the email though. There's not really a good way to change that right now.