@phalla The keyword considering midnight from UTC +0700 according to timezone set for Graylog server. I would like to recommend a workaround where you can use absolute search instead of a keyword search because the keyword search soon going to eliminate from Graylog due to less use of it and its result depends on the timezone settings.
Hope this helps you 