Is there a way to shutdown an interface after a certain amount of time being down? I'm trying to create an alert that will email stating it is down (this part works) then the escalation portion will then run an ncm script or external script to shutdown the interface. Is this possible?
If I understand your intention correctly, you may want to try invoking the Unmanage verb on Orion.NPM.Interfaces.
There are some examples of invoking that verb via PowerShell and the REST API in this thread: