Elastalert always using UTC timezone

[Bobo357]

Hi!

Can't get elastalert to use correct timezone in alerts.
I'm using latest image (sha256:9c4f06e3233178a41bb055cf1b04367e5e03a3c67460c47527626612959a2c98).

To debug this problem I added custom timestamp format in config.yaml:

custom_pretty_ts_format: '%Y.%m.%d %H:%M'
use_local_time: True

When running elastalert-test-rule you can see that log lines (first 3) use correct timezone (UTC+0300) and timestamp format but alert text (latter 2) uses incorrect format and UTC:

INFO:elastalert:Queried rule any_vcenter_vm_changes from 2025.07.04 14:24 to 2025.07.04 15:24: 3 / 3 hits
INFO:elastalert:Queried rule any_vcenter_vm_changes from 2025.07.04 15:24 to 2025.07.04 16:24: 1 / 1 hits
INFO:elastalert:Queried rule any_vcenter_vm_changes from 2025.07.04 16:24 to 2025.07.04 16:25: 0 / 0 hits
INFO:elastalert:Alert for any_vcenter_vm_changes at 2025-07-04T11:44:49.265Z:
INFO:elastalert:**Timestamp**: 2025-07-04T11:44:49.265Z 

Rule definition:

name: any_vcenter_vm_changes

type: any
timeframe:
  minutes: 120

index: filebeat-*

filter:
- query:
    query_string:
      query: 'process.name: "vpxd" AND message: "vim.event.VmReconfiguredEvent"'

realert:
  minutes: 0

include: ["host.name","message"]

use_local_time: true

alert_subject: "VM reconfigured"

alert_text_type: alert_text_only

alert_text_args:
  - "@timestamp"
  - host.name[1]
  - message

alert_text: |
  **Timestamp**: {} 
  **Host**: {} 
  **Event**: {} 

alert:
  - debug

[jertel]

There are several threads on this discussion forum that talk about this. Since they are marked closed you will have to set the search filter to include Closed discussions to see them. One specifically links to this page that offers some suggestions: https://stackoverflow.com/questions/39763392/how-to-adjust-timestamp-to-local-time-zone-in-elastalert