If all Graylog is in time sync and your messages show correct timestamp and it’s just email received that has the wrong timestamp, test against the email server… did you check the timezone in the calendar of the Gmail account you are using? maybe test sending to an alternate e-mail server to go through that you know is in the correct time zone?