Søren Eggert Lundsteen Olsen
2284e7f082
A DBA should be able to review every statement SQLInsight sends to a monitored server before granting it access. "SQL Scripts/<rule-id>.sql" holds, per rule (82 built-in, 16 community), a Danish header (what and why, how C# judges the data, thresholds with config keys, severity, exact GRANTs, versions, collector file and member) and the collector's SQL verbatim, every version variant as its own batch. "_collectors/<Collector>.sql" holds each collector's queries once. The only statement that is not strictly read-only is documented in the scripts: the deadlock collector's session temp table (#system_health). Inline SQL in the collectors moved to internal constants and Build*Sql methods (no text changed), so SqlScriptTests can check that the scripts still contain the SQL the code sends, that every rule has a script, that every collector query is registered, and that nothing writes. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
37 lines
2.3 KiB
Transact-SQL
37 lines
2.3 KiB
Transact-SQL
-- ===================================================================================================================
|
|
-- Collector: InstanceProbe
|
|
-- ===================================================================================================================
|
|
-- Hvad: Registrering af instansen: version, udgave, cluster og Always On. Køres, når agenten forbinder, og
|
|
-- bestemmer hvilke varianter og regler der bruges.
|
|
-- Fil: src/SQLInsight.Connectivity/InstanceProbe.cs
|
|
-- Interval: én gang, når agenten forbinder til instansen
|
|
-- Versioner: Alle (SQL Server 2000 og nyere)
|
|
--
|
|
-- Rettigheder til agentens login (se db/permissions/grant-least-privilege.sql; [agent] = agentens login):
|
|
-- Ingen ekstra rettighed: public må læse dette (SERVERPROPERTY, sys.configurations, DBCC TRACESTATUS, xp_msver).
|
|
--
|
|
-- Bruges af: SQLI-VER-001, SQLI-VER-002, SQLI-CFG-009, SQLI-CFG-012, SQLI-DB-006, SQLI-JOB-002
|
|
-- Read-only: Ja: kun SELECT samt SET-sessionsindstillinger. Intet ændrer data, indstillinger eller objekter.
|
|
-- Kørsel: Kør i SSMS som agentens login. Hver variant er sin egen batch (GO); en variant for en anden SQL Server-version
|
|
-- end din kan fejle - det er forventet. Agenten kører altid med sessionsindstillingerne i _collectors/InstanceProbe.sql.
|
|
-- ===================================================================================================================
|
|
|
|
-- Variant: Alle versioner: sættes på hver forbindelse, agenten åbner
|
|
-- Kilde: SqlConnectionFactory.SessionSettings
|
|
-- Kode: src/SQLInsight.Connectivity/SqlConnectionFactory.cs : SqlConnectionFactory.SessionSettings
|
|
SET LOCK_TIMEOUT 5000; SET DEADLOCK_PRIORITY LOW; SET TRANSACTION ISOLATION LEVEL READ UNCOMMITTED;
|
|
GO
|
|
|
|
-- Variant: Alle versioner (SQL Server 2000 og nyere)
|
|
-- Kilde: InstanceProbe.Query
|
|
-- Kode: src/SQLInsight.Connectivity/InstanceProbe.cs : InstanceProbe.Query
|
|
SELECT
|
|
CAST(SERVERPROPERTY('ServerName') AS nvarchar(256)),
|
|
CAST(SERVERPROPERTY('ProductVersion') AS nvarchar(128)),
|
|
CAST(SERVERPROPERTY('ProductLevel') AS nvarchar(128)),
|
|
CAST(SERVERPROPERTY('ProductUpdateLevel') AS nvarchar(128)),
|
|
CAST(SERVERPROPERTY('Edition') AS nvarchar(128)),
|
|
CAST(SERVERPROPERTY('EngineEdition') AS int),
|
|
CAST(SERVERPROPERTY('IsClustered') AS int),
|
|
CAST(SERVERPROPERTY('IsHadrEnabled') AS int)
|
|
GO
|