{
  "rule": {
    "template": "CN={{subject.krbprincipalname.0.partition('/')[2].partition('@')[0]}}"
  },
  "options": {
    "data_source": "subject.krbprincipalname.0.partition('/')[2].partition('@')[0]"
  }
}