Graylog will use the timezone configured in the root_timezone setting for new users logging in via LDAP.
root_timezone