Alerts › scripts. The kind row is the same list as an alert rule. None of them ticked would match every kind, and the hub refuses a trigger that matches every alert.
Open Alerts › scripts and press new trigger. Name it and choose Who is signed in. Downtime is already ticked, so this draft would run when a machine goes offline. Disk, checks, reboots, network path, Docker apps and custom metric are clear. Leave when on any matching machine.
Tick disk and clear downtime. A disk alert is the only kind that starts this script. Accounts server already has one open, on /. The key box stays empty, so every disk matches, on every machine. Warning and above is the severity floor. Press save when this is the one you want. This shot stops before that. Cancel drops the draft. Run on is still these machines, and none is ticked, so a save would also need a target.
One volume, such as disk:/, is Run a script for one disk only. The machine that raised it is Run a script on the machine that raised the alert. A failed check, not a full disk, is Run a script only when a check fails. A restart is Run a script only when a machine restarts. A new external address or a WAN failover is Run a script only when the network path changes. A Docker app is Run a script only when a Docker app is unhealthy. A custom metric is Run a script only when a custom metric goes down. A person told about disk, with no script, is Only tell them about a full disk.