Where splunk default alert action script will store.Once i created a script to execute in alert action then where it will store and from where it will trigger ?????
Please find the below link for you question,
https://docs.splunk.com/Documentation/Splunk/7.2.3/Alert/Runscriptaction
Sid