转：使用fn_dblog解析SQL SERVER 数据库日志方法

Posted 2020-10-04 www.84ren.com返利网

http://blog.itpub.net/8183550/viewspace-682907

 

一直以来我都很困惑，不知道怎么解析SQL SERVER的日志，

因为微软提供了fn_dblog(NULL,NULL)和DBCC LOG获取数据库日志的基本信息，但是都是二进制码，看不懂。最近终于成功解析了SQL SERVER LOG信息

在fn_dblog(NULL,NULL)输出结果中，

获取表名是AllocUnitName字段。

具体获取方法：AllocUnitName like ‘dbo.TEST%‘

操作类型是：Operation

数据是：[RowLog Contents 0]字段内容

如果是UPDATE操作：修改后数据存放在[RowLog Contents 1]字段内

最基本3种操作类型：‘LOP_INSERT_ROWS‘,‘LOP_DELETE_ROWS‘,‘LOP_MODIFY_ROW‘

具体解析代码如下：

--解析日志
create function dbo.f_splitBinary(@s varbinary(8000))
returns @t table(id int identity(1,1),Value binary(1))
as
begin
declare @i int,@im int
select @i=1,@im=datalength(@s)
while @i<[email protected]
begin
  insert into @t select substring(@s,@i,1) 
  set @[email protected]+1
end
return
end

GO

create function dbo.f_reverseBinary(@s varbinary(128))
returns varbinary(128)
as
begin
declare @r varbinary(128)
set @r=0x
select @[email protected]+Value from dbo.f_splitBinary(@s) a order by id desc
return @r
end

GO
 
 
 
create proc [dbo].[p_getLog](@TableName sysname,@c int=100)
/*
解析日志
胡冰
时间：2010年12月30日
工作单位：www.5173.com

sample:  p_getLog ‘tablename‘;

*/
as
set nocount on
declare @s varbinary(8000),@s1 varbinary(8000),@str varchar(8000),@str1 varchar(8000),@lb int,@le int,@operation varchar(128)
declare @i int,@lib int,@lie int,@ib int,@ie int,@lenVar int,@columnname sysname,@length int,@columntype varchar(32),@prec int,@scale int
declare @TUVLength int,@vc int,@tc int,@bitAdd int,@bitCount int,@count int

select b.name,b.length,c.name typename,b.colid,b.xprec,b.xscale,
    case when c.name not like ‘%var%‘ and c.name not in (‘xml‘,‘text‘,‘image‘) then 1 else 2 end p,row_number() over(partition by 
    case when c.name not like ‘%var%‘ and c.name not in (‘xml‘,‘text‘,‘image‘) then 1 else 2 end order by colid) pid
into #t
    from sysobjects a inner join syscolumns b on a.id=b.id inner join systypes c on b.xtype=c.xusertype
    where [email protected] order by b.colid

SELECT top(@c) Operation,[RowLog Contents 0],[RowLog Contents 1],[RowLog Contents 2],[RowLog Contents 3],[Log Record],id=identity(int,1,1) into #t1
    from::fn_dblog (null, null) 
    where AllocUnitName like ‘dbo.‘[email protected]+‘%‘and
    Operation in(‘LOP_INSERT_ROWS‘,‘LOP_DELETE_ROWS‘,‘LOP_MODIFY_ROW‘ )
    AND Context not in (‘LCX_IAM‘,‘LCX_PFS‘)
     order by [Current LSN] desc

select @tc=count(*) from #t

select @lb=min(id),@le=max(id) from #t1
while @lb<[email protected]
begin
    select @operation=Operation,@s=[RowLog Contents 0],@s1=[RowLog Contents 1] from #t1 where [email protected] AND [RowLog Contents 1] IS NOT NULL
    set @TUVLength=convert(int,dbo.f_reverseBinary(substring(@s,3,2)))+3
    select @i=5,@str=‘‘,@vc=0,@bitCount=0
    select @lib=min(pid),@lie=max(pid) from #t where p=1 
    while @lib<[email protected]
    begin
        select @columnname=name,@length=length,@columntype=typename,@prec=xprec,@scale=xscale,@vc=colid-1 from #t where p=1 and [email protected]
--        if @columntype<>‘bit‘
--            print rtrim(@i)+‘->‘+rtrim(@length)

        if dbo.f_reverseBinary(substring(@s,@TUVLength,1+((@tc-1)/8))) & power(2,@vc) <> 0 
        begin
            if @columntype<>‘bit‘
                select @[email protected][email protected]+‘=NULL,‘,@[email protected][email protected]
            else
            begin
                select @[email protected][email protected]+‘=NULL,‘
                set @bitAdd = case when @bitCount=0 then @i else @bitAdd end
                set @bitCount = (@bitCount + 1)%8    
                set @[email protected]+case @bitCount when 1 then 1 else 0 end
--                print rtrim(@bitAdd)+‘->‘+rtrim(@length)
            end                
        end
        else if @columntype=‘char‘
            select @[email protected][email protected]+‘=‘+convert(varchar(256),substring(@s,@i,@length))+‘,‘,@[email protected][email protected]
        else if @columntype=‘nchar‘
            select @[email protected][email protected]+‘=‘+convert(nvarchar(256),substring(@s,@i,@length))+‘,‘,@[email protected][email protected]
        else if @columntype=‘datetime‘
            select @[email protected][email protected]+‘=‘+convert(varchar,dateadd(second,convert(int,dbo.f_reverseBinary(substring(@s,@i,4)))/300
                ,dateadd(day,convert(int,dbo.f_reverseBinary(substring(@s,@i+4,4))),‘1900-01-01‘)),120)+‘,‘,@[email protected]+8
        else if @columntype=‘smalldatetime‘
            select @[email protected][email protected]+‘=‘+convert(varchar,dateadd(minute,convert(int,dbo.f_reverseBinary(substring(@s,@i,2)))
                ,dateadd(day,convert(int,dbo.f_reverseBinary(substring(@s,@i+2,2))),‘1900-01-01‘)),120)+‘,‘,@[email protected]+4
        else if @columntype=‘int‘
            select @[email protected][email protected]+‘=‘+rtrim(convert(int,dbo.f_reverseBinary(substring(@s,@i,4))))+‘,‘,@[email protected]+4
        else if @columntype=‘decimal‘
            select @[email protected][email protected]+‘=DECIMAL,‘,@[email protected][email protected]
        else if @columntype=‘bit‘
        begin
            set @bitAdd = case when @bitCount=0 then @i else @bitAdd end
            set @bitCount = (@bitCount + 1)%8
            select @[email protected][email protected]+‘=‘+rtrim(convert(bit,substring(@s,@bitAdd,1)&power(2,case @bitCount when 0 then 8 else @bitCount end-1)))+‘,‘
                ,@[email protected]+case @bitCount when 1 then 1 else 0 end
--            print rtrim(@bitAdd)+‘->‘+rtrim(@length)
        end
        set @[email protected]+1
    end
    set @i=convert(int,dbo.f_reverseBinary(substring(@s,3,2)))+4+((@tc-1)/8)
    set @lenVar=convert(int,dbo.f_reverseBinary(substring(@s,@i,2)))
    set @[email protected]+2
    set @[email protected] + @lenVar*2
    set @ie=convert(int,dbo.f_reverseBinary(substring(@s,@i,2)))
    set @count=0
    select @lib=min(pid),@lie=max(pid) from #t where p=2 
    while @lib<[email protected]
    begin
--        print rtrim(@ib)+‘->‘+rtrim(@ie)
        select @columnname=name,@length=length,@columntype=typename,@vc=colid-1 from #t where p=2 and [email protected]
        if dbo.f_reverseBinary(substring(@s,@TUVLength,1+((@tc-1)/8))) & power(2,@vc) <> 0 
        begin
            select @[email protected][email protected]+‘=NULL,‘
            select @[email protected]+1,@[email protected]+2
            if @count<@lenVar
                set @ie=convert(int,dbo.f_reverseBinary(substring(@s,@i,2)))
        end
        else if @columntype=‘varchar‘
        begin
            select @[email protected][email protected]+‘=‘+convert(varchar(256),substring(@s,@ib,@[email protected]+1))+‘,‘
            select @[email protected]+1,@[email protected]+2
            set @ie=convert(int,dbo.f_reverseBinary(substring(@s,@i,2)))
        end
        else if @columntype=‘nvarchar‘
        begin
            select @[email protected][email protected]+‘=‘+convert(nvarchar(256),substring(@s,@ib,@[email protected]+1))+‘,‘
            select @[email protected]+1,@[email protected]+2
            set @ie=convert(int,dbo.f_reverseBinary(substring(@s,@i,2)))
        end
        set @[email protected]+1
        set @[email protected]+1
    end
    set @str=left(@str,len(@str)-1)
    
     IF @operation =‘LOP_MODIFY_ROW‘  
     BEGIN
          set @TUVLength=convert(int,dbo.f_reverseBinary(substring(@s1,3,2)))+3
   select @i=5,@str1=‘‘,@vc=0,@bitCount=0
   select @lib=min(pid),@lie=max(pid) from #t where p=1 
   while @lib<[email protected]
   begin
    select @columnname=name,@length=length,@columntype=typename,@prec=xprec,@scale=xscale,@vc=colid-1 from #t where p=1 and [email protected]
  --        if @columntype<>‘bit‘
  --            print rtrim(@i)+‘->‘+rtrim(@length)

    if dbo.f_reverseBinary(substring(@s1,@TUVLength,1+((@tc-1)/8))) & power(2,@vc) <> 0 
    begin
     if @columntype<>‘bit‘
      select @[email protected][email protected]+‘=NULL,‘,@[email protected][email protected]
     else
     begin
      select @[email protected][email protected]+‘=NULL,‘
      set @bitAdd = case when @bitCount=0 then @i else @bitAdd end
      set @bitCount = (@bitCount + 1)%8    
      set @[email protected]+case @bitCount when 1 then 1 else 0 end
  --                print rtrim(@bitAdd)+‘->‘+rtrim(@length)
     end                
    end
    else if @columntype=‘char‘
     select @[email protected][email protected]+‘=‘+convert(varchar(256),substring(@s1,@i,@length))+‘,‘,@[email protected][email protected]
    else if @columntype=‘nchar‘
     select @[email protected][email protected]+‘=‘+convert(nvarchar(256),substring(@s1,@i,@length))+‘,‘,@[email protected][email protected]
    else if @columntype=‘datetime‘
     select @[email protected][email protected]+‘=‘+convert(varchar,dateadd(second,convert(int,dbo.f_reverseBinary(substring(@s1,@i,4)))/300
      ,dateadd(day,convert(int,dbo.f_reverseBinary(substring(@s1,@i+4,4))),‘1900-01-01‘)),120)+‘,‘,@[email protected]+8
    else if @columntype=‘smalldatetime‘
     select @[email protected][email protected]+‘=‘+convert(varchar,dateadd(minute,convert(int,dbo.f_reverseBinary(substring(@s1,@i,2)))
      ,dateadd(day,convert(int,dbo.f_reverseBinary(substring(@s1,@i+2,2))),‘1900-01-01‘)),120)+‘,‘,@[email protected]+4
    else if @columntype=‘int‘
     select @[email protected][email protected]+‘=‘+rtrim(convert(int,dbo.f_reverseBinary(substring(@s1,@i,4))))+‘,‘,@[email protected]+4
    else if @columntype=‘decimal‘
     select @[email protected][email protected]+‘=DECIMAL,‘,@[email protected][email protected]
    else if @columntype=‘bit‘
    begin
     set @bitAdd = case when @bitCount=0 then @i else @bitAdd end
     set @bitCount = (@bitCount + 1)%8
     select @[email protected][email protected]+‘=‘+rtrim(convert(bit,substring(@s1,@bitAdd,1)&power(2,case @bitCount when 0 then 8 else @bitCount end-1)))+‘,‘
      ,@[email protected]+case @bitCount when 1 then 1 else 0 end
  --            print rtrim(@bitAdd)+‘->‘+rtrim(@length)
    end
    set @[email protected]+1
   end
   set @i=convert(int,dbo.f_reverseBinary(substring(@s1,3,2)))+4+((@tc-1)/8)
   set @lenVar=convert(int,dbo.f_reverseBinary(substring(@s1,@i,2)))
   set @[email protected]+2
   set @[email protected] + @lenVar*2
   set @ie=convert(int,dbo.f_reverseBinary(substring(@s1,@i,2)))
   set @count=0
   select @lib=min(pid),@lie=max(pid) from #t where p=2 
   while @lib<[email protected]
   begin
  --        print rtrim(@ib)+‘->‘+rtrim(@ie)
    select @columnname=name,@length=length,@columntype=typename,@vc=colid-1 from #t where p=2 and [email protected]
    if dbo.f_reverseBinary(substring(@s1,@TUVLength,1+((@tc-1)/8))) & power(2,@vc) <> 0 
    begin
     select @[email protected][email protected]+‘=NULL,‘
     select @[email protected]+1,@[email protected]+2
     if @count<@lenVar
      set @ie=convert(int,dbo.f_reverseBinary(substring(@s1,@i,2)))
    end
    else if @columntype=‘varchar‘
    begin
     select @[email protected][email protected]+‘=‘+convert(varchar(256),substring(@s1,@ib,@[email protected]+1))+‘,‘
     select @[email protected]+1,@[email protected]+2
     set @ie=convert(int,dbo.f_reverseBinary(substring(@s1,@i,2)))
    end
    else if @columntype=‘nvarchar‘
    begin
     select @[email protected][email protected]+‘=‘+convert(nvarchar(256),substring(@s1,@ib,@[email protected]+1))+‘,‘
     select @[email protected]+1,@[email protected]+2
     set @ie=convert(int,dbo.f_reverseBinary(substring(@s1,@i,2)))
    end
    set @[email protected]+1
    set @[email protected]+1
   end
   set @str1=left(@str1,len(@str1)-1)

     END
    
    IF @operation =‘LOP_MODIFY_ROW‘  
    BEGIN
     print   @operation+‘修改前值： ‘[email protected]
     
     print   @operation+‘修改后值：‘[email protected]
     
    END
    ELSE
 BEGIN
  print @operation+‘:‘[email protected]
 END
    
    
    
    
    set @[email protected]+1
END

 

 

drop table #t,#t1

 

GO

 

因为目前解析SQL 2008会有很多错误