MS SQL監控數據庫的DDL操作

    前言： 有時候，一個數據庫有多個帳號，包括數據庫管理員，開發人員，運維支撐人員等，可能有很多帳號都有比較大的權限，例如DDL操作權限(創建，修改，刪除存儲過程，創建，修改，刪除表等），賬戶多了，管理起來就會相當麻煩，容易產生混亂，如果數據庫管理員不監控數據庫架構變更的話，就不知道誰對數據庫架構做了啥改動（此處改動僅僅只DDL操作），尤其有時候，有些開發人員可能不按規章制度辦事，繞過或忘了通知發布人員或DBA，直接去生產機做一些DDL操作，那么我們就需要對數據庫架構某些更改的事件進行監控，如果能夠監控並留下證據，這樣既可以讓DBA或相關管理人員知曉這些變更，有效管理數據庫，也可以避免出現問題，出現扯皮現象，最后DBA成了背黑鍋的。

  下面就是一個解決上述問題的方案，我們通過創建一個表DatabaseLog和DDL觸發器來解決問題，首先在msdb數據庫里面新建一個表DatabaseLog，用來保存DDL觸發器獲取的信息。其中DDL觸發器主要通過EVENTDATA()函數返回有關服務器或數據庫事件的信息。

SQL Code 1

1. USE msdb;
2.  
3. GO
4.  
6.  
7. CREATE TABLE [dbo].[DatabaseLog]
8.  
9. (
10.  
11.     [DatabaseLogID]   [int]    IDENTITY(1,1) NOT NULL,
12.  
13.     [PostTime]        [datetime] NOT NULL,
14.  
15.     [DatabaseUser]    [sysname] COLLATE SQL_Latin1_General_CP1_CI_AS NOT NULL,
16.  
17.     [LoginName]       [sysname] COLLATE SQL_Latin1_General_CP1_CI_AS NULL,
18.  
19.     [ClientHost]      [sysname] COLLATE SQL_Latin1_General_CP1_CI_AS NULL,
20.  
21.     [Event]           [sysname] COLLATE SQL_Latin1_General_CP1_CI_AS NOT NULL,
22.  
23.     [Schema]          [sysname] COLLATE SQL_Latin1_General_CP1_CI_AS NULL,
24.  
25.     [Object]          [sysname] COLLATE SQL_Latin1_General_CP1_CI_AS NULL,
26.  
27.     [TSQL]            [nvarchar](max) COLLATE SQL_Latin1_General_CP1_CI_AS NOT NULL,
28.  
29.     [XmlEvent]        [xml] NOT NULL,
30.  
31. CONSTRAINT [PK_DatabaseLog_DatabaseLogID] PRIMARY KEY NONCLUSTERED
32.  
33. (
34.  
35.     [DatabaseLogID] ASC
36.  
37.   )WITH (PAD_INDEX= OFF, IGNORE_DUP_KEY = OFF) ON [PRIMARY]
38.  
39. ) ON [PRIMARY]
40.  
42.  
43. GO
44.  
45. EXEC sys.sp_addextendedproperty@name=N'MS_Description', @value=N'Primary key for DatabaseLog records.' , @level0type=N'SCHEMA',@level0name=N'dbo', @level1type=N'TABLE',@level1name=N'DatabaseLog', @level2type=N'COLUMN',@level2name=N'DatabaseLogID'
46.  
47. GO
48.  
49. EXEC sys.sp_addextendedproperty@name=N'MS_Description', @value=N'The date and time the DDL change occurred.' , @level0type=N'SCHEMA',@level0name=N'dbo', @level1type=N'TABLE',@level1name=N'DatabaseLog', @level2type=N'COLUMN',@level2name=N'PostTime'
50.  
51. GO
52.  
53. EXEC sys.sp_addextendedproperty@name=N'MS_Description', @value=N'The user who implemented the DDL change.' , @level0type=N'SCHEMA',@level0name=N'dbo', @level1type=N'TABLE',@level1name=N'DatabaseLog', @level2type=N'COLUMN',@level2name=N'DatabaseUser'
54.  
55. GO
56.  
57. EXEC sys.sp_addextendedproperty@name=N'MS_Description', @value=N'The login which implemented the DDL change.' , @level0type=N'SCHEMA',@level0name=N'dbo', @level1type=N'TABLE',@level1name=N'DatabaseLog', @level2type=N'COLUMN',@level2name=N'LoginName'
58.  
59. GO
60.  
61. EXEC sys.sp_addextendedproperty@name=N'MS_Description', @value=N'The client machine on which implemented the DDL change.' , @level0type=N'SCHEMA',@level0name=N'dbo', @level1type=N'TABLE',@level1name=N'DatabaseLog', @level2type=N'COLUMN',@level2name=N'ClientHost'
62.  
63. GO
64.  
65. EXEC sys.sp_addextendedproperty@name=N'MS_Description', @value=N'The type of DDL statement that was executed.' , @level0type=N'SCHEMA',@level0name=N'dbo', @level1type=N'TABLE',@level1name=N'DatabaseLog', @level2type=N'COLUMN',@level2name=N'Event'
66.  
67. GO
68.  
69. EXEC sys.sp_addextendedproperty@name=N'MS_Description', @value=N'The schema to which the changed object belongs.' , @level0type=N'SCHEMA',@level0name=N'dbo', @level1type=N'TABLE',@level1name=N'DatabaseLog', @level2type=N'COLUMN',@level2name=N'Schema'
70.  
71. GO
72.  
73. EXEC sys.sp_addextendedproperty@name=N'MS_Description', @value=N'The object that was changed by the DDL statment.' , @level0type=N'SCHEMA',@level0name=N'dbo', @level1type=N'TABLE',@level1name=N'DatabaseLog', @level2type=N'COLUMN',@level2name=N'Object'
74.  
75. GO
76.  
77. EXEC sys.sp_addextendedproperty@name=N'MS_Description', @value=N'The exact Transact-SQL statement that was executed.' , @level0type=N'SCHEMA',@level0name=N'dbo', @level1type=N'TABLE',@level1name=N'DatabaseLog', @level2type=N'COLUMN',@level2name=N'TSQL'
78.  
79. GO
80.  
81. EXEC sys.sp_addextendedproperty@name=N'MS_Description', @value=N'The raw XML data generated by database trigger.' , @level0type=N'SCHEMA',@level0name=N'dbo', @level1type=N'TABLE',@level1name=N'DatabaseLog', @level2type=N'COLUMN',@level2name=N'XmlEvent'
82.  
83. GO
84.  
85. EXEC sys.sp_addextendedproperty@name=N'MS_Description', @value=N'Audit table tracking all DDL changes made to the database. Data is captured by the database trigger ddlDatabaseTriggerLog.' , @level0type=N'SCHEMA',@level0name=N'dbo', @level1type=N'TABLE',@level1name=N'DatabaseLog'
86.  
87. GO
88.  
89. EXEC sys.sp_addextendedproperty@name=N'MS_Description', @value=N'Primary key (nonclustered) constraint' , @level0type=N'SCHEMA',@level0name=N'dbo', @level1type=N'TABLE',@level1name=N'DatabaseLog', @level2type=N'CONSTRAINT',@level2name=N'PK_DatabaseLog_DatabaseLogID'
90.  
92.  
93. GO

例如，我要監控數據庫MyAssistant的DDL操作，那么我們首先在“數據庫郵件”里面創建一個配置名為“ DataBase_DDL_Event”的配置文件（profile name）,這個就不多講了，不知道配置的，自己先練練手把，假如我需要讓數據庫把監控到DDL操作變動相信信息發送到我的郵箱 *****@***.com(用你自己的郵箱替代)，那么只需要修改下面代碼的郵箱和profile_name即可。

SQL Code 2

1. USE MyAssistant;
2. GO
3.  
4. CREATE TRIGGER [DTG_DatabaseDdlTriggerLog]
5. ON DATABASE
6. FOR DDL_DATABASE_LEVEL_EVENTS
7. AS
8. BEGIN
9.     SET NOCOUNT ON;
10.  
11.     DECLARE @data XML;
12.     DECLARE @schema sysname;
13.     DECLARE @object sysname;
14.     DECLARE @eventType sysname;
15.     DECLARE @tableHTML  NVARCHAR(MAX) ;
16.     
17.     SET @data = EVENTDATA();
18.     SET @eventType = @data.value('(/EVENT_INSTANCE/EventType)[1]', 'sysname');
19.     SET @schema = @data.value('(/EVENT_INSTANCE/SchemaName)[1]', 'sysname');
20.     SET @object = @data.value('(/EVENT_INSTANCE/ObjectName)[1]', 'sysname')
21.  
22.     IF @object IS NOT NULL
23.         PRINT '  ' + @eventType + ' - ' + @schema + '.' + @object;
24.     ELSE
25.         PRINT '  ' + @eventType + ' - ' + @schema;
26.  
27.     IF @eventType IS NULL
28.         PRINT CONVERT(nvarchar(max), @data);
29.  
30.     INSERT [msdb].[dbo].[DatabaseLog]
31.         (
32.         [PostTime],
33.         [DatabaseUser],
34.         [LoginName],
35.         [ClientHost],
36.         [Event],
37.         [Schema],
38.         [Object],
39.         [TSQL],
40.         [XmlEvent]
41.         )
42.     VALUES
43.         (
44.         GETDATE(),
45.         CONVERT(sysname, CURRENT_USER),
46.         @data.value('(/EVENT_INSTANCE/LoginName)[1]', 'nvarchar(max)'),
47.         CONVERT(sysname, HOST_NAME()),
48.         @eventType,
49.         CONVERT(sysname, @schema),
50.         CONVERT(sysname, @object),
51.         @data.value('(/EVENT_INSTANCE/TSQLCommand)[1]', 'nvarchar(max)'),
52.         @data
53.         );
54.  
55.     SET @tableHTML =   
56.     N'<H1>DDL Event</H1>' +     
57.     N'<table border="0">' +     
58.     N'<tr><th>Post Time</th><th>User</th><th>Login</th><th>ClientHost</th>' +     
59.     N'<th>TSQL</th><th></tr>' +     
60.     CAST(( SELECT
61.     td = PostTime,       '',                     
62.     td = DatabaseUser, '',        
63.     td = LoginName, '',     
64.     td = ClientHost, '',         
65.     td = TSQL, ''               
66.     FROM msdb.dbo.DatabaseLog               
67.     WHERE DatabaseLogID =(select max(DatabaseLogID) from msdb.dbo.DatabaseLog)               
68.     FOR XML PATH('tr'), TYPE     ) AS NVARCHAR(MAX) ) +     N'</table>' ;
69.  
70.     EXEC msdb.dbo.sp_send_dbmail     
71.              @profile_name = 'DataBase_DDL_Event',
72.         @recipients='***@***.com',     
73.         @subject = 'DDL Event - DataBase MyAssistant',     
74.         @body = @tableHTML,   
75.         @body_format = 'HTML' ;
76. END;
77.  
78.  
79.  
80. GO

接下來我們來測試一下，假如一個用戶Test登錄數據庫，一不小心刪除了一個Test的表，如下圖一所示，那么我將收到一封郵件，提示我用戶Test在那台客戶端主機執行了啥DDL操作(如下圖二所示)，當然郵件的樣式、排版有興趣的可以去美化一下。