Yandex Cloud
Search
Contact UsTry it for free
  • Customer Stories
  • Documentation
  • Blog
  • All Services
  • System Status
  • Marketplace
    • Featured
    • Infrastructure & Network
    • Data Platform
    • AI for business
    • Security
    • DevOps tools
    • Serverless
    • Monitoring & Resources
  • All Solutions
    • By industry
    • By use case
    • Economics and Pricing
    • Security
    • Technical Support
    • Start testing with double trial credits
    • Cloud credits to scale your IT product
    • Gateway to Russia
    • Cloud for Startups
    • Center for Technologies and Society
    • Yandex Cloud Partner program
    • Price calculator
    • Pricing plans
  • Customer Stories
  • Documentation
  • Blog
© 2026 Direct Cursus Technology L.L.C.
Yandex Cloud Detection and Response
  • Getting started
    • All guides
      • Overview
      • Managing queries
      • Working with templates
      • Working with a database schema and datasets
      • History
  • KQL reference
  • Access management

In this article:

  • Working with a database schema
  • Viewing fields
  • Searching by field
  • Inserting a field into a query
  • Working with datasets
  • Viewing datasets
  • Lookup tables
  • Inserting a dataset into a query
  1. Step-by-step guides
  2. Queries
  3. Working with a database schema and datasets

Working with a database schema and datasets

Written by
Yandex Cloud
Updated at April 3, 2026
  • Working with a database schema
    • Viewing fields
    • Searching by field
    • Inserting a field into a query
  • Working with datasets
    • Viewing datasets
    • Lookup tables
    • Inserting a dataset into a query

Note

This feature is in the Preview stage. To get access, contact tech support or your account manager.

Working with a database schemaWorking with a database schema

The Database schema tab contains a hierarchical structure of all available fields in a database.

Viewing fieldsViewing fields

To view fields:

Security Deck UI
  1. Open the Query data panel.
  2. Navigate to the Database schema tab.
  3. Expand the sections by clicking the arrows.

For each field the following is displayed:

  • Name
  • Data type

Searching by fieldSearching by field

To find a field:

Security Deck UI
  1. Open the Database schema tab.
  2. Enter a name in the Search fields field.
  3. The results will be displayed automatically.

Inserting a field into a queryInserting a field into a query

To insert a field into a query:

Security Deck UI
  1. Click the field in the database schema.
  2. Select Insert into query.

The field name will be added to the query editor at the cursor position.

Working with datasetsWorking with datasets

The Datasets tab contains a list of available datasets and lookup tables.

Viewing datasetsViewing datasets

To view datasets:

Security Deck UI
  1. Open the data panel.
  2. Navigate to the Datasets tab.
  3. Select a dataset from the list.

For each dataset the following is displayed:

  • Name.
  • Description.
  • List of fields with data types.

Lookup tablesLookup tables

Lookup table are lookup tables used to enrich data. They are displayed in a separate section on the datasets tab.

To view Lookup table:

Security Deck UI
  1. Open the Datasets tab.
  2. Go to Lookup table.
  3. Select a table from the list.

Inserting a dataset into a queryInserting a dataset into a query

To insert a dataset into a query:

Security Deck UI
  1. Find the required dataset.
  2. Click the dataset.
  3. Select Insert into query.

The dataset name will be added to the query editor.

See alsoSee also

  • Investigations
  • Queries
  • Managing queries
  • Working with query templates

Was the article helpful?

Previous
Working with templates
Next
History
© 2026 Direct Cursus Technology L.L.C.