Elasticsearch operator

We use containerized application deployed at ocp and a legacy application (JVM application) deployed outside openshift platform. We use elasticsearch operator for logging the application deployed at ocp. We want to serve the legacy application deployed outside ocp by same operator.

1- could we expose the elasticsearch operator externally to serve application outside ocp? or should we install a new ekasticsearch pod to server outside legacy application?

2- does using operator allows automatic upgrade of elasticsearch to latest version?

3- our design of legacy application logging includes installing beat agents at application (client) and both logstash and elasticsearch at same server (OCP). Is there an operator for logstash at ocp and could we expose it outside and let it communicate internally with Elasticsearch operator? Or does elasticsearch operator include logstash as well?

what is the best practice here?