I recently viewed several events in my switches in regards to a Topology change. Is there a way to localize the issue, or what might be causing the event. My fear is one of the employees plug something into a active wall port.
This is not the answer to your question.The easiest way is to enable BPDU protection on all access ports and you are safe from the staff.
The answer to your question would probably be to search the logs of the switches to find the trigger. BPDUs are the data packets that trigger a topology change.https://en.wikipedia.org/wiki/Bridge_Protocol_Data_Unit