I got the solution for this on another web page regarding question mark "?" on Kibana Discover Metricbeat fields.
But I have another question, should I write the different grok for metricbeat
because I have two grok for Apache logs and Jboss logs both are under different if conditions.