Grok Filter help needed with Suricata Logs

You mean you want proto to contain "TCP" instead of "{TCP}" and service to contain "3" instead of "[Priority: 3]"? To avoid misunderstandings an example of what you have and what you want to get would help.