Exclude files from monitoring

Hi, 

I'm running DLP version 12.5 and i'm trying to exclude some files from monitoring (to reduce system / agent overhead) 

Under Agent Configuration, i have added some rules to ignore / monitor file types (see attached file) 

Today, i received email from DLP server about security breach and when i looked at the incident i saw a file type that should not be there (*.rra)  - screenshot attached. 

Can someone please help me figure out when the file is monitor and how can i now what is the monitor "destination detection" (is it Local drive / File Access / CD/DVD ... )  - how can i know ? 

Appreciate any help you could provide.