Please read carefully the About the Elasticsearch category and specifically the "Also be patient" part. It is not polite to bump your thread after just 9 hours like you did.
Furthermore, Elastalert is a third-party plugin so you will likely get more useful support from a more Elastalert-focussed forum. The recommended way to do alerting with Elasticsearch is with Watcher.