Elastic Stack architecture recommandation in production

No need
Point your logstash output to all 3 data nodes it will load balance automatically