When a Windows endpoint user attaches a Microsoft Office file that contains sensitive data to the OneNote application running in Windows Apps, and the notify response rule is used, multiple notification pop-ups display instead of only one.
Multiple pop-ups display when OneNote running in Windows Apps is monitored through the Application Monitoring screen.
To prevent multiple pop-ups from displaying you add a file path filter.
To add a file path filter: