frappe script, splunk contains string