We wanted to have spanning tree protocol monitoring for all switches but the problem its quite tricky to meet the condition to monitor and put the conditions when the major incident gets occurred.
the normal state change alert can help but it will flood the alert unnecessarily. Did any one have enabled this monitoring at your environment and if you could share more details about it will be more helpful to us ?