# Translate Axis event namespaces before building an RTSP filter

> Translate Axis event-declaration prefixes into the documented RTSP event-topic filter prefixes. Preserve the selected topic and message-content filter separately when checking event receipt.

- Canonical URL: https://update.dsesecurity.com/updates/translate-axis-event-namespaces-before-building-an-rtsp-filter/
- Publisher: Detection Systems & Engineering (DSE Security)
- Author: DSE Security Editorial Team
- Published: 2026-10-29T20:33:26+00:00
- Modified: 2026-10-29T20:33:34+00:00
- Last reviewed by DSE: 2026-10-29
- Resource type: Guide
- DSE priority: Advisory
- Topics: IT, Video Surveillance
- Reading time: 3 minutes

## What you need to know

Translate Axis event-declaration prefixes into the documented RTSP event-topic filter prefixes. Preserve the selected topic and message-content filter separately when checking event receipt.

## Potentially affected

Axis products exposing the documented Event data streaming interface; confirm actual device, hardware and software applicability before applying the proposed checks.

## DSE recommendation

DSE recommends storing the device declaration, translated topic expression and optional content expression as separate reviewed fields.

## Article

Bottom line: Keep the declared event identity and its RTSP subscription expression together. Resolve the namespace translation before treating a missing notification as proof that the physical event never occurred.

## Source fact: documented behavior

Axis’s [Event data streaming](https://developer.axis.com/vapix/network-video/event-data-streaming/) says event declarations use tns1 and tnsaxis, while event-topic filters use onvif and axis respectively.

The documented stream carries XML event notifications over RTSP/RTP, and the workflow begins by querying supported event declarations.

The source distinguishes the eventtopic topic filter from the eventcontent filter for message source, key and data elements.

## What the source does not establish

Do not infer an identical subscription syntax for WebSocket or another transport. Confirm the actual device’s supported events and stream prerequisites. A translated expression is a configuration input, not proof of notification delivery, event continuity or a complete recording workflow.

## Applicability questions

- Which actual event declaration and topic should the consumer receive?

- Which declaration prefixes need translation for the RTSP request?

- What message fields should a separate content filter select?

- Which harmless observed input can verify the intended notification?

## DSE recommendation: controlled next steps

The following steps are DSE recommendations based on the cited source.

DSE recommends storing the device declaration, translated topic expression and optional content expression as separate reviewed fields.

- Retrieve the supported event declaration from an authorized pilot device and preserve the relevant topic and field names. Copy identifiers from that response rather than deriving them from a friendly event label. Write the RTSP topic expression beside the declaration and explicitly check each namespace prefix against the documented translation.

- Review any content filter independently from topic selection. Identify whether each named item belongs to the message source, key or data. Use a proposed harmless input with a known expected field value, and obtain a second reviewer’s reading of the complete expression before starting the subscription. Keep credentials out of stored request examples.

- Establish the approved stream through the supported client workflow and exercise only the permitted event input. Compare the received XML topic and relevant fields with the reviewed declaration and filters. If the notification is missing, retain the request and response evidence and investigate support, syntax and the input observation separately instead of broadening every filter at once.

## Verification and evidence

Retain the declaration, translated topic filter, optional content filter and sanitized stream result with the observed input time. Have another reviewer match the received event to its intended source and value. Keep a working video picture separate from confirmation of the event stream.

For a proposed desk exercise, deliberately leave declaration-style prefixes in a subscription expression and ask the reviewer to correct the mapping before any live request. Also review a content expression that selects the wrong field. These are labeled test fixtures, not observed faults. No RTSP subscription or notification-delivery test has been performed for this article.

## Official references

- [Event data streaming](https://developer.axis.com/vapix/network-video/event-data-streaming/) — Axis Communications; official VAPIX documentation.

Source review completed October 29, 2026. Recheck the official documentation and the deployed device’s capabilities before changing production settings.

## Primary reference

- Name: Axis Communications — Event data streaming
- Authority: Axis Communications
- URL: https://developer.axis.com/vapix/network-video/event-data-streaming/
- Source publication date: Not stated by the source

## Citation and use

Preferred citation: “Translate Axis event namespaces before building an RTSP filter,” DSE Security, https://update.dsesecurity.com/updates/translate-axis-event-namespaces-before-building-an-rtsp-filter/
Publishing principles: https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/
Usage and citation policy: https://update.dsesecurity.com/usage/
Copyright © 2026 Detection Systems & Engineering. All rights reserved.