I don’t know exactly, but I think you can set the deafult timezone for users somewhere. Maybe that cause the wrong settings for one user.
I found it.
https://community.graylog.org/t/global-timezone-for-all-users/1558/2
“Graylog will use the timezone configured in the root_timezone setting for new users logging in via LDAP.”