Impossible to create a second index

Hello,

It is not clear what your issue is and what is this second index you mention.

The output configuration you shared has only one output, with the index syslog-%{YYYY.MM.dd}, so all your data, no matter the input, will be sent to this index.