使用fn_dblog解析SQL SERVER 数据库日志方法

使用 fn_dblog 解析SQL SERVER 数据库日志方法 2010-12-30
16:12:57

因为微软提供了fn_dblog(NULL,NULL)和DBCC LOG获取数据库日志的基本信息，但是都是二进制码，看不懂。最近终于成功解析了SQL SERVER LOG信息

在fn_dblog(NULL,NULL)输出结果中，

获取表名是AllocUnitName字段。

具体获取方法：AllocUnitName like 'dbo.TEST%'

操作类型是：Operation

数据是：[RowLog Contents 0]字段内容

如果是UPDATE操作：修改后数据存放在[RowLog Contents 1]字段内

最基本3种操作类型：'LOP_INSERT_ROWS','LOP_DELETE_ROWS','LOP_MODIFY_ROW'

具体解析代码如下：

--解析日志

create function dbo.f_splitBinary(@s varbinary(8000))

returns @t table(id int identity(1,1),Value binary(1))

as

begin

declare @i int,@im int

select @i=1,@im=datalength(@s)

while @i<=@im

begin

insert into @t select substring(@s,@i,1)

set @i=@i+1

end

return

end

GO

create function dbo.f_reverseBinary(@s varbinary(128))

returns varbinary(128)

as

begin

declare @r varbinary(128)

set @r=0x

select @r=@r+Value from dbo.f_splitBinary(@s) a order by id desc

return @r

end

GO

create proc [dbo].[p_getLog](@TableName sysname,@c int=100)

/*

解析日志

胡冰

时间：2010年12月30日

工作单位：www.5173.com

sample: p_getLog 'tablename';

*/

as

set nocount on

declare @s varbinary(8000),@s1 varbinary(8000),@str varchar(8000),@str1 varchar(8000),@lb int,@le int,@operation varchar(128)

declare @i int,@lib int,@lie int,@ib int,@ie int,@lenVar int,@columnname sysname,@length int,@columntype varchar(32),@prec int,@scale int

declare @TUVLength int,@vc int,@tc int,@bitAdd int,@bitCount int,@count int

select b.name,b.length,c.name typename,b.colid,b.xprec,b.xscale,

case when c.name not like '%var%' and c.name not in ('xml','text','image') then 1 else 2 end p,row_number() over(partition by

case when c.name not like '%var%' and c.name not in ('xml','text','image') then 1 else 2 end order by colid) pid

into #t

from sysobjects a inner join syscolumns b on a.id=b.id inner join systypes c on b.xtype=c.xusertype

where a.name=@TableName order by b.colid

SELECT top(@c) Operation,[RowLog Contents 0],[RowLog Contents 1],[RowLog Contents 2],[RowLog Contents 3],[Log Record],id=identity(int,1,1) into #t1

from::fn_dblog (null, null)

where AllocUnitName like 'dbo.'+@TableName+'%'and

Operation in('LOP_INSERT_ROWS','LOP_DELETE_ROWS','LOP_MODIFY_ROW' )

AND Context not in ('LCX_IAM','LCX_PFS')

order by [Current LSN] desc

select @tc=count(*) from #t

select @lb=min(id),@le=max(id) from #t1

while @lb<=@le

begin

select @operation=Operation,@s=[RowLog Contents 0],@s1=[RowLog Contents 1] from #t1 where id=@lb AND [RowLog Contents 1] IS NOT NULL

set @TUVLength=convert(int,dbo.f_reverseBinary(substring(@s,3,2)))+3

select @i=5,@str='',@vc=0,@bitCount=0

select @lib=min(pid),@lie=max(pid) from #t where p=1

while @lib<=@lie

begin

select @columnname=name,@length=length,@columntype=typename,@prec=xprec,@scale=xscale,@vc=colid-1 from #t where p=1 and pid=@lib

-- if @columntype<>'bit'

-- print rtrim(@i)+'->'+rtrim(@length)

if dbo.f_reverseBinary(substring(@s,@TUVLength,1+((@tc-1)/8))) & power(2,@vc) <> 0

begin

if @columntype<>'bit'

select @str=@str+@columnname+'=NULL,',@i=@i+@length

else

begin

select @str=@str+@columnname+'=NULL,'

set @bitAdd = case when @bitCount=0 then @i else @bitAdd end

set @bitCount = (@bitCount + 1)%8

set @i=@i+case @bitCount when 1 then 1 else 0 end

-- print rtrim(@bitAdd)+'->'+rtrim(@length)

end

end

else if @columntype='char'

select @str=@str+@columnname+'='+convert(varchar(256),substring(@s,@i,@length))+',',@i=@i+@length

else if @columntype='nchar'

select @str=@str+@columnname+'='+convert(nvarchar(256),substring(@s,@i,@length))+',',@i=@i+@length

else if @columntype='datetime'

select @str=@str+@columnname+'='+convert(varchar,dateadd(second,convert(int,dbo.f_reverseBinary(substring(@s,@i,4)))/300

,dateadd(day,convert(int,dbo.f_reverseBinary(substring(@s,@i+4,4))),'1900-01-01')),120)+',',@i=@i+8

else if @columntype='smalldatetime'

select @str=@str+@columnname+'='+convert(varchar,dateadd(minute,convert(int,dbo.f_reverseBinary(substring(@s,@i,2)))

,dateadd(day,convert(int,dbo.f_reverseBinary(substring(@s,@i+2,2))),'1900-01-01')),120)+',',@i=@i+4

else if @columntype='int'

select @str=@str+@columnname+'='+rtrim(convert(int,dbo.f_reverseBinary(substring(@s,@i,4))))+',',@i=@i+4

else if @columntype='decimal'

select @str=@str+@columnname+'=DECIMAL,',@i=@i+@length

else if @columntype='bit'

begin

set @bitAdd = case when @bitCount=0 then @i else @bitAdd end

set @bitCount = (@bitCount + 1)%8

select @str=@str+@columnname+'='+rtrim(convert(bit,substring(@s,@bitAdd,1)&power(2,case @bitCount when 0 then 8 else @bitCount end-1)))+','

,@i=@i+case @bitCount when 1 then 1 else 0 end

-- print rtrim(@bitAdd)+'->'+rtrim(@length)

end

set @lib=@lib+1

end

set @i=convert(int,dbo.f_reverseBinary(substring(@s,3,2)))+4+((@tc-1)/8)

set @lenVar=convert(int,dbo.f_reverseBinary(substring(@s,@i,2)))

set @i=@i+2

set @ib=@i + @lenVar*2

set @ie=convert(int,dbo.f_reverseBinary(substring(@s,@i,2)))

set @count=0

select @lib=min(pid),@lie=max(pid) from #t where p=2

while @lib<=@lie

begin

-- print rtrim(@ib)+'->'+rtrim(@ie)

select @columnname=name,@length=length,@columntype=typename,@vc=colid-1 from #t where p=2 and pid=@lib

if dbo.f_reverseBinary(substring(@s,@TUVLength,1+((@tc-1)/8))) & power(2,@vc) <> 0

begin

select @str=@str+@columnname+'=NULL,'

select @ib=@ie+1,@i=@i+2

if @count<@lenVar

set @ie=convert(int,dbo.f_reverseBinary(substring(@s,@i,2)))

end

else if @columntype='varchar'

begin

select @str=@str+@columnname+'='+convert(varchar(256),substring(@s,@ib,@ie-@ib+1))+','

select @ib=@ie+1,@i=@i+2

set @ie=convert(int,dbo.f_reverseBinary(substring(@s,@i,2)))

end

else if @columntype='nvarchar'

begin

select @str=@str+@columnname+'='+convert(nvarchar(256),substring(@s,@ib,@ie-@ib+1))+','

select @ib=@ie+1,@i=@i+2

set @ie=convert(int,dbo.f_reverseBinary(substring(@s,@i,2)))

end

set @count=@count+1

set @lib=@lib+1

end

set @str=left(@str,len(@str)-1)

IF @operation ='LOP_MODIFY_ROW'

BEGIN

set @TUVLength=convert(int,dbo.f_reverseBinary(substring(@s1,3,2)))+3

select @i=5,@str1='',@vc=0,@bitCount=0

select @lib=min(pid),@lie=max(pid) from #t where p=1

while @lib<=@lie

begin

select @columnname=name,@length=length,@columntype=typename,@prec=xprec,@scale=xscale,@vc=colid-1 from #t where p=1 and pid=@lib

-- if @columntype<>'bit'

-- print rtrim(@i)+'->'+rtrim(@length)

if dbo.f_reverseBinary(substring(@s1,@TUVLength,1+((@tc-1)/8))) & power(2,@vc) <> 0

begin

if @columntype<>'bit'

select @str1=@str1+@columnname+'=NULL,',@i=@i+@length

else

begin

select @str1=@str1+@columnname+'=NULL,'

set @bitAdd = case when @bitCount=0 then @i else @bitAdd end

set @bitCount = (@bitCount + 1)%8

set @i=@i+case @bitCount when 1 then 1 else 0 end

-- print rtrim(@bitAdd)+'->'+rtrim(@length)

end

end

else if @columntype='char'

select @str1=@str1+@columnname+'='+convert(varchar(256),substring(@s1,@i,@length))+',',@i=@i+@length

else if @columntype='nchar'

select @str1=@str1+@columnname+'='+convert(nvarchar(256),substring(@s1,@i,@length))+',',@i=@i+@length

else if @columntype='datetime'

select @str1=@str1+@columnname+'='+convert(varchar,dateadd(second,convert(int,dbo.f_reverseBinary(substring(@s1,@i,4)))/300

,dateadd(day,convert(int,dbo.f_reverseBinary(substring(@s1,@i+4,4))),'1900-01-01')),120)+',',@i=@i+8

else if @columntype='smalldatetime'

select @str1=@str1+@columnname+'='+convert(varchar,dateadd(minute,convert(int,dbo.f_reverseBinary(substring(@s1,@i,2)))

,dateadd(day,convert(int,dbo.f_reverseBinary(substring(@s1,@i+2,2))),'1900-01-01')),120)+',',@i=@i+4

else if @columntype='int'

select @str1=@str1+@columnname+'='+rtrim(convert(int,dbo.f_reverseBinary(substring(@s1,@i,4))))+',',@i=@i+4

else if @columntype='decimal'

select @str1=@str1+@columnname+'=DECIMAL,',@i=@i+@length

else if @columntype='bit'

begin

set @bitAdd = case when @bitCount=0 then @i else @bitAdd end

set @bitCount = (@bitCount + 1)%8

select @str1=@str1+@columnname+'='+rtrim(convert(bit,substring(@s1,@bitAdd,1)&power(2,case @bitCount when 0 then 8 else @bitCount end-1)))+','

,@i=@i+case @bitCount when 1 then 1 else 0 end

-- print rtrim(@bitAdd)+'->'+rtrim(@length)

end

set @lib=@lib+1

end

set @i=convert(int,dbo.f_reverseBinary(substring(@s1,3,2)))+4+((@tc-1)/8)

set @lenVar=convert(int,dbo.f_reverseBinary(substring(@s1,@i,2)))

set @i=@i+2

set @ib=@i + @lenVar*2

set @ie=convert(int,dbo.f_reverseBinary(substring(@s1,@i,2)))

set @count=0

select @lib=min(pid),@lie=max(pid) from #t where p=2

while @lib<=@lie

begin

-- print rtrim(@ib)+'->'+rtrim(@ie)

select @columnname=name,@length=length,@columntype=typename,@vc=colid-1 from #t where p=2 and pid=@lib

if dbo.f_reverseBinary(substring(@s1,@TUVLength,1+((@tc-1)/8))) & power(2,@vc) <> 0

begin

select @str1=@str1+@columnname+'=NULL,'

select @ib=@ie+1,@i=@i+2

if @count<@lenVar

set @ie=convert(int,dbo.f_reverseBinary(substring(@s1,@i,2)))

end

else if @columntype='varchar'

begin

select @str1=@str1+@columnname+'='+convert(varchar(256),substring(@s1,@ib,@ie-@ib+1))+','

select @ib=@ie+1,@i=@i+2

set @ie=convert(int,dbo.f_reverseBinary(substring(@s1,@i,2)))

end

else if @columntype='nvarchar'

begin

select @str1=@str1+@columnname+'='+convert(nvarchar(256),substring(@s1,@ib,@ie-@ib+1))+','

select @ib=@ie+1,@i=@i+2

set @ie=convert(int,dbo.f_reverseBinary(substring(@s1,@i,2)))

end

set @count=@count+1

set @lib=@lib+1

end

set @str1=left(@str1,len(@str1)-1)

END

IF @operation ='LOP_MODIFY_ROW'

BEGIN

print @operation+'修改前值： '+@str

print @operation+'修改后值：'+@str1

END

ELSE

BEGIN

print @operation+':'+@str

END

set @lb=@lb+1

END

drop table #t,#t1

GO

[From: http://space.itpub.net/8183550/viewspace-682907 ]