This is likely due to the nozzle not being able to keep up with the load from Traffic Controller. You can confirm this by looking for slow consumer alerts [1]. It is recommended to scale your nozzle instances to match the number of Traffic Controllers in your deployment.

[1] - Loggregator Operator Guide - https://docs.cloudfoundry.org/loggregator/log-ops-guide.html

Adam