TZ (timezone) -- where do I set it in a clustered environment?

Hello, we have a syslog device that is sending log in UTC, but we need them to be in US/Pacific. Where do I set the TZ setting? Searchhead? Indexers? HeavyForwarder?