Søren Eggert Lundsteen Olsen
2284e7f082
A DBA should be able to review every statement SQLInsight sends to a monitored server before granting it access. "SQL Scripts/<rule-id>.sql" holds, per rule (82 built-in, 16 community), a Danish header (what and why, how C# judges the data, thresholds with config keys, severity, exact GRANTs, versions, collector file and member) and the collector's SQL verbatim, every version variant as its own batch. "_collectors/<Collector>.sql" holds each collector's queries once. The only statement that is not strictly read-only is documented in the scripts: the deadlock collector's session temp table (#system_health). Inline SQL in the collectors moved to internal constants and Build*Sql methods (no text changed), so SqlScriptTests can check that the scripts still contain the SQL the code sends, that every rule has a script, that every collector query is registered, and that nothing writes. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
79 lines
5.1 KiB
Transact-SQL
79 lines
5.1 KiB
Transact-SQL
-- ===================================================================================================================
|
||
-- SQLI-DLK-001: Deadlocks
|
||
-- ===================================================================================================================
|
||
-- Regel-id: SQLI-DLK-001
|
||
-- Titel: Deadlocks
|
||
-- Alvor: Medium; High fra 10 deadlocks siden sidste måling.
|
||
-- Versioner: SQL Server 2008 og nyere (system_health). 2012+: event-filerne; 2008/2008 R2: ring buffer. SQL Server
|
||
-- 2005: "tjek manuelt" (trace flag 1222).
|
||
--
|
||
-- Hvad tjekkes, og hvorfor:
|
||
-- Om der er sket deadlocks siden forrige måling.
|
||
--
|
||
-- Vurdering (sker i C# ud fra de indsamlede data, ikke i SQL'en, medmindre andet er nævnt):
|
||
-- xml_deadlock_report-hændelser fra system_health parses i C#. Første gang tages kun det seneste døgn med; derefter
|
||
-- læses videre fra seneste fil og offset. Agentens egne deadlocks (program 'SQLInsight Pro') tælles ikke. Fund når
|
||
-- der er nye deadlocks; de seneste 3 vises med processer.
|
||
--
|
||
-- Grænseværdier (konfigurationsnøgle i agentens appsettings.json og standardværdi):
|
||
-- Ingen (High fra 10, fast i koden).
|
||
--
|
||
-- Rettigheder til agentens login (se db/permissions/grant-least-privilege.sql; [agent] = agentens login):
|
||
-- GRANT VIEW SERVER STATE TO [agent]; -- SQL Server 2005-2019
|
||
-- GRANT VIEW SERVER PERFORMANCE STATE TO [agent]; -- SQL Server 2022+ (erstatter VIEW SERVER STATE)
|
||
-- GRANT VIEW SERVER SECURITY STATE TO [agent]; -- SQL Server 2022+
|
||
--
|
||
-- Data kommer fra (collector, fil : medlemmer, interval):
|
||
-- DeadlockCollector
|
||
-- Fil: src/SQLInsight.Collectors/Concurrency/DeadlockCollector.cs
|
||
-- Medlemmer: DeadlockCollector.BuildFileSql(lastFile: null, lastOffset: null), DeadlockCollector.RingBufferSql
|
||
-- Interval: 5 min som standard (SQLInsight:CollectorIntervals:deadlocks)
|
||
-- Delt script: SQL Scripts/_collectors/DeadlockCollector.sql
|
||
-- Regelkode: src/SQLInsight.Rules/Concurrency/ConcurrencyRules.cs : DeadlockRule.Evaluate
|
||
--
|
||
-- Read-only: IKKE STRENGT READ-ONLY. DeadlockCollector.BuildFileSql (SQL Server 2012+) opretter en midlertidig
|
||
-- tabel i tempdb (SELECT ... INTO #system_health) og sletter den igen (DROP TABLE #system_health) i
|
||
-- samme batch. Den er privat for sessionen; ingen brugerdata, indstillinger eller permanente objekter
|
||
-- ændres, men det er en skrivning i tempdb. Ring buffer-varianten (2008/2008 R2) er read-only. Øvrigt:
|
||
-- kun SELECT samt SET-sessionsindstillinger.
|
||
-- Kørsel: Kør i SSMS som agentens login (eller et login med samme rettigheder). Hver variant er sin egen batch
|
||
-- (GO); en variant for en anden SQL Server-version end din kan fejle - det er forventet.
|
||
-- Per-database-forespørgsler er vist for databasen msdb, som findes overalt: ret navnet til den
|
||
-- database, du vil se.
|
||
-- ===================================================================================================================
|
||
|
||
-- -------------------------------------------------------------------------------------------------------------------
|
||
-- Forbindelsen: Sessionsindstillinger, agenten sætter på hver forbindelse
|
||
-- -------------------------------------------------------------------------------------------------------------------
|
||
|
||
-- Variant: Alle versioner: sættes på hver forbindelse, agenten åbner
|
||
-- Kilde: SqlConnectionFactory.SessionSettings
|
||
-- Kode: src/SQLInsight.Connectivity/SqlConnectionFactory.cs : SqlConnectionFactory.SessionSettings
|
||
SET LOCK_TIMEOUT 5000; SET DEADLOCK_PRIORITY LOW; SET TRANSACTION ISOLATION LEVEL READ UNCOMMITTED;
|
||
GO
|
||
|
||
-- -------------------------------------------------------------------------------------------------------------------
|
||
-- DeadlockCollector: Nye deadlock-grafer (xml_deadlock_report) fra den indbyggede system_health-session.
|
||
-- -------------------------------------------------------------------------------------------------------------------
|
||
|
||
-- Variant: SQL Server 2012 og nyere (system_health-filer; første læsning)
|
||
-- Kilde: DeadlockCollector.BuildFileSql
|
||
-- Kode: src/SQLInsight.Collectors/Concurrency/DeadlockCollector.cs : DeadlockCollector.BuildFileSql(lastFile: null, lastOffset: null)
|
||
SELECT object_name, file_name, file_offset,
|
||
CASE WHEN object_name = N'xml_deadlock_report' THEN CAST(event_data AS nvarchar(max)) END AS event_data
|
||
INTO #system_health
|
||
FROM sys.fn_xe_file_target_read_file(N'system_health*.xel', NULL, NULL, NULL);
|
||
|
||
SELECT event_data FROM #system_health WHERE event_data IS NOT NULL;
|
||
SELECT TOP (1) file_name, file_offset FROM #system_health ORDER BY file_name DESC, file_offset DESC;
|
||
DROP TABLE #system_health;
|
||
GO
|
||
|
||
-- Variant: SQL Server 2008 – 2008 R2, og når event-filerne ikke kan læses
|
||
-- Kilde: DeadlockCollector.RingBufferSql
|
||
-- Kode: src/SQLInsight.Collectors/Concurrency/DeadlockCollector.cs : DeadlockCollector.RingBufferSql
|
||
SELECT CAST(t.target_data AS nvarchar(max))
|
||
FROM sys.dm_xe_session_targets t
|
||
JOIN sys.dm_xe_sessions s ON s.address = t.event_session_address
|
||
WHERE s.name = N'system_health' AND t.target_name = N'ring_buffer'
|
||
GO
|