Søren Eggert Lundsteen Olsen
2284e7f082
A DBA should be able to review every statement SQLInsight sends to a monitored server before granting it access. "SQL Scripts/<rule-id>.sql" holds, per rule (82 built-in, 16 community), a Danish header (what and why, how C# judges the data, thresholds with config keys, severity, exact GRANTs, versions, collector file and member) and the collector's SQL verbatim, every version variant as its own batch. "_collectors/<Collector>.sql" holds each collector's queries once. The only statement that is not strictly read-only is documented in the scripts: the deadlock collector's session temp table (#system_health). Inline SQL in the collectors moved to internal constants and Build*Sql methods (no text changed), so SqlScriptTests can check that the scripts still contain the SQL the code sends, that every rule has a script, that every collector query is registered, and that nothing writes. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
92 lines
6.9 KiB
Transact-SQL
92 lines
6.9 KiB
Transact-SQL
-- ===================================================================================================================
|
|
-- SQLI-TRAN-001: Transaktion har været åben længe
|
|
-- ===================================================================================================================
|
|
-- Regel-id: SQLI-TRAN-001
|
|
-- Titel: Transaktion har været åben længe
|
|
-- Alvor: Medium; High når den har været åben 6 x grænsen.
|
|
-- Versioner: SQL Server 2005 og nyere.
|
|
--
|
|
-- Hvad tjekkes, og hvorfor:
|
|
-- Om en brugertransaktion har været åben længe og holder låse og forhindrer, at loggen og version store ryddes.
|
|
--
|
|
-- Vurdering (sker i C# ud fra de indsamlede data, ikke i SQL'en, medmindre andet er nævnt):
|
|
-- Hvert minut læses op til 100 åbne transaktioner for brugersessioner (ikke agentens egne). Fund (op til 10, ældste
|
|
-- først) for transaktioner, hvis alder (målingstidspunkt - transaction_begin_time i UTC) er mindst grænsen.
|
|
--
|
|
-- Grænseværdier (konfigurationsnøgle i agentens appsettings.json og standardværdi):
|
|
-- SQLInsight:Activity:TransactionMinutes, standard 10 (minutter); High fra 6 x grænsen.
|
|
--
|
|
-- Rettigheder til agentens login (se db/permissions/grant-least-privilege.sql; [agent] = agentens login):
|
|
-- GRANT VIEW SERVER STATE TO [agent]; -- SQL Server 2005-2019
|
|
-- GRANT VIEW SERVER PERFORMANCE STATE TO [agent]; -- SQL Server 2022+ (erstatter VIEW SERVER STATE)
|
|
-- GRANT VIEW SERVER SECURITY STATE TO [agent]; -- SQL Server 2022+
|
|
--
|
|
-- Data kommer fra (collector, fil : medlemmer, interval):
|
|
-- ActivityCollector
|
|
-- Fil: src/SQLInsight.Collectors/Concurrency/ActivityCollector.cs
|
|
-- Medlemmer: ActivityCollector.BuildTransactionsSql(1024) = TransactionsSql udfyldt,
|
|
-- ActivityCollector.BuildLongRequestsSql(15) = LongRequestsSql udfyldt
|
|
-- Interval: 1 min som standard (SQLInsight:CollectorIntervals:activity)
|
|
-- Delt script: SQL Scripts/_collectors/ActivityCollector.sql
|
|
-- Regelkode: src/SQLInsight.Rules/Concurrency/ActivityRules.cs : LongTransactionRule.Evaluate
|
|
--
|
|
-- Read-only: Ja: kun SELECT samt SET-sessionsindstillinger. Intet ændrer data, indstillinger eller objekter.
|
|
-- Kørsel: Kør i SSMS som agentens login (eller et login med samme rettigheder). Hver variant er sin egen batch
|
|
-- (GO); en variant for en anden SQL Server-version end din kan fejle - det er forventet.
|
|
-- Per-database-forespørgsler er vist for databasen msdb, som findes overalt: ret navnet til den
|
|
-- database, du vil se.
|
|
-- ===================================================================================================================
|
|
|
|
-- -------------------------------------------------------------------------------------------------------------------
|
|
-- Forbindelsen: Sessionsindstillinger, agenten sætter på hver forbindelse
|
|
-- -------------------------------------------------------------------------------------------------------------------
|
|
|
|
-- Variant: Alle versioner: sættes på hver forbindelse, agenten åbner
|
|
-- Kilde: SqlConnectionFactory.SessionSettings
|
|
-- Kode: src/SQLInsight.Connectivity/SqlConnectionFactory.cs : SqlConnectionFactory.SessionSettings
|
|
SET LOCK_TIMEOUT 5000; SET DEADLOCK_PRIORITY LOW; SET TRANSACTION ISOLATION LEVEL READ UNCOMMITTED;
|
|
GO
|
|
|
|
-- -------------------------------------------------------------------------------------------------------------------
|
|
-- ActivityCollector: Åbne brugertransaktioner (alder, log) og brugersætninger, der har kørt længere end grænsen.
|
|
-- Agentens egne sessioner er udeladt.
|
|
-- -------------------------------------------------------------------------------------------------------------------
|
|
|
|
-- Variant: SQL Server 2005 og nyere (vist med standardgrænsen 1024 MB log)
|
|
-- Kilde: ActivityCollector.BuildTransactionsSql
|
|
-- Kode: src/SQLInsight.Collectors/Concurrency/ActivityCollector.cs : ActivityCollector.BuildTransactionsSql(1024) = TransactionsSql udfyldt
|
|
SELECT TOP 100 t.session_id, t.transaction_id, t.name, DATEADD(minute, DATEDIFF(minute, GETDATE(), GETUTCDATE()), t.begin_time),
|
|
t.used, t.reserved, t.db, t.dbs, s.login_name, s.host_name, s.program_name, s.status, r.wait_type,
|
|
CAST(CASE WHEN r.sql_handle IS NOT NULL
|
|
THEN SUBSTRING(q.text, r.statement_start_offset / 2 + 1,
|
|
CASE WHEN r.statement_end_offset = -1 THEN 1000 ELSE (r.statement_end_offset - r.statement_start_offset) / 2 + 1 END)
|
|
ELSE LEFT(q.text, 1000) END AS nvarchar(1000))
|
|
FROM (SELECT st.session_id, at.transaction_id, MAX(at.name) AS name, MIN(at.transaction_begin_time) AS begin_time,
|
|
ISNULL(SUM(dt.database_transaction_log_bytes_used), 0) AS used, ISNULL(SUM(dt.database_transaction_log_bytes_reserved), 0) AS reserved,
|
|
MIN(DB_NAME(dt.database_id)) AS db, COUNT(DISTINCT dt.database_id) AS dbs
|
|
FROM sys.dm_tran_session_transactions st
|
|
JOIN sys.dm_tran_active_transactions at ON at.transaction_id = st.transaction_id
|
|
LEFT JOIN sys.dm_tran_database_transactions dt ON dt.transaction_id = st.transaction_id AND dt.database_id <> 32767
|
|
GROUP BY st.session_id, at.transaction_id) t
|
|
JOIN sys.dm_exec_sessions s ON s.session_id = t.session_id
|
|
OUTER APPLY (SELECT TOP 1 x.sql_handle, x.statement_start_offset, x.statement_end_offset, x.wait_type FROM sys.dm_exec_requests x
|
|
WHERE x.session_id = t.session_id ORDER BY x.request_id) r
|
|
OUTER APPLY (SELECT TOP 1 c.most_recent_sql_handle FROM sys.dm_exec_connections c WHERE c.session_id = t.session_id) c
|
|
OUTER APPLY sys.dm_exec_sql_text(COALESCE(r.sql_handle, c.most_recent_sql_handle)) q
|
|
WHERE s.is_user_process = 1 AND s.session_id <> @@SPID AND (s.program_name IS NULL OR s.program_name NOT LIKE N'SQLInsight Pro%') AND t.begin_time IS NOT NULL
|
|
ORDER BY CASE WHEN t.used + t.reserved >= 1073741824 THEN 0 ELSE 1 END, t.begin_time
|
|
GO
|
|
|
|
-- Variant: SQL Server 2005 og nyere (vist med standardgrænsen 15 minutter)
|
|
-- Kilde: ActivityCollector.BuildLongRequestsSql
|
|
-- Kode: src/SQLInsight.Collectors/Concurrency/ActivityCollector.cs : ActivityCollector.BuildLongRequestsSql(15) = LongRequestsSql udfyldt
|
|
SELECT TOP 50 r.session_id, DATEADD(minute, DATEDIFF(minute, GETDATE(), GETUTCDATE()), r.start_time), r.total_elapsed_time, r.command, r.status,
|
|
r.wait_type, r.wait_time, DB_NAME(r.database_id), s.login_name, s.host_name, s.program_name, r.blocking_session_id,
|
|
CAST(SUBSTRING(q.text, r.statement_start_offset / 2 + 1,
|
|
CASE WHEN r.statement_end_offset = -1 THEN 1000 ELSE (r.statement_end_offset - r.statement_start_offset) / 2 + 1 END) AS nvarchar(1000))
|
|
FROM sys.dm_exec_requests r
|
|
JOIN sys.dm_exec_sessions s ON s.session_id = r.session_id
|
|
OUTER APPLY sys.dm_exec_sql_text(r.sql_handle) q
|
|
WHERE s.is_user_process = 1 AND s.session_id <> @@SPID AND (s.program_name IS NULL OR s.program_name NOT LIKE N'SQLInsight Pro%') AND r.total_elapsed_time > 900000 AND r.percent_complete = 0
|
|
ORDER BY r.total_elapsed_time DESC
|
|
GO
|