When using Symantec Endpoint Protection Deception you receive multiple emails for same notification events, even after notifications have been acknowledged.
Deception events query did not filter out old records that have just recently been uploaded.
This issue is fixed in Symantec Endpoint Protection 14.2 RU1. For information on how to obtain the latest build of Symantec Endpoint Protection, read
TECH 103088: Download the latest version of Symantec Endpoint Protection