废话不多说了，具体代码如下所示：

--SYSTEM表空间不足的报警 
登录之后，查询，发现是sys.aud$占的地方太多。 
SQL> select owner, segment_name, segment_type, sum(bytes)/1024/1024 space_m  
  from dba_segments  
  where tablespace_name = 'SYSTEM'  
group by owner, segment_name, segment_type 
having sum(bytes)/1024/1024 >= 20 
order by space_m desc 
; 
 4  5  6  7  
OWNER  SEGMENT_NAME   SEGMENT_TYPE SPACE_M 
-------- ------------------------------- ------- 
SYS   AUD$       TABLE      4480 
SYS   IDL_UB1$     TABLE       272 
SYS   SOURCE$      TABLE       72 
SYS   IDL_UB2$     TABLE       32 
SYS   C_OBJ#_INTCOL#  CLUSTER      27 
SYS   C_TOID_VERSION#  CLUSTER      24 
6 rows selected. 
SQL> 
查看是哪个记得比较多。 
col userhost format a30 
select userid, userhost, count(1) from sys.aud$  
where ntimestamp# >=CAST(to_date('2014-03-01 00:00:00', 'YYYY-MM-DD hh24:mi:ss') AS TIMESTAMP)  
group by userid, userhost 
having count(1) > 500 
order by count(1) desc 
; 
再继续找哪天比较多。 
select to_char(ntimestamp#, 'YYYY-MM-DD') audit_date, count(1)  
from sys.aud$  
where ntimestamp# >=CAST(to_date('2014-03-01 00:00:00', 'YYYY-MM-DD hh24:mi:ss') AS TIMESTAMP)  
and userid = 'xxxx' and userhost = 'xxxx' 
group by to_char(ntimestamp#, 'YYYY-MM-DD')  
order by count(1) desc 
; 
select spare1, count(1) from sys.aud$  
where ntimestamp# between CAST(to_date('2014-03-10 00:00:00', 'YYYY-MM-DD hh24:mi:ss') AS TIMESTAMP)  
and CAST(to_date('2014-03-11 00:00:00', 'YYYY-MM-DD hh24:mi:ss') AS TIMESTAMP) 
and userid = 'xxxx' and userhost = 'xxxx' 
group by spare1 
; 
select action#, count(1) from sys.aud$  
where ntimestamp# between CAST(to_date('2014-03-10 00:00:00', 'YYYY-MM-DD hh24:mi:ss') AS TIMESTAMP)  
and CAST(to_date('2014-03-11 00:00:00', 'YYYY-MM-DD hh24:mi:ss') AS TIMESTAMP) 
and userid = 'xxxx' and userhost = 'xxxx' 
and spare1 = 'xxxx' 
group by action# 
order by count(1) desc 
; 
结果如下： 
  ACTION#  COUNT(1) 
---------- ---------- 
    101   124043 
    100   124043 
SQL> 
其实是上次打开的audit一直没有关闭。 
关闭： 
SQL> noaudit session; 
清空： 
truncate table sys.aud$; 
------------------------------------------------------------------------ 
实战 
------------------------------------------------------------------------ 
--1,查询表空间占用情况 
select dbf.tablespace_name as tablespace_name, 
     dbf.totalspace as totalspace, 
     dbf.totalblocks as totalblocks, 
     dfs.freespace freespace, 
     dfs.freeblocks freeblocks, 
     (dfs.freespace / dbf.totalspace) * 100 as freeRate  
     from (select t.tablespace_name, 
     sum(t.bytes) / 1024 / 1024 totalspace, 
     sum(t.blocks) totalblocks 
     from DBA_DATA_FILES t 
     group by t.tablespace_name) dbf, 
     (select tt.tablespace_name, 
     sum(tt.bytes) / 1024 / 1024 freespace, 
     sum(tt.blocks) freeblocks 
     from DBA_FREE_SPACE tt 
     group by tt.tablespace_name) dfs 
     where trim(dbf.tablespace_name) = trim(dfs.tablespace_name) 
--2,查看哪里占的比较多 SYSTEM 为step1中查询 tablespace_name 内容 
select owner, segment_name, segment_type, sum(bytes)/1024/1024 space_m  
  from dba_segments  
  where tablespace_name = 'SYSTEM'  
group by owner, segment_name, segment_type 
having sum(bytes)/1024/1024 >= 20 
order by space_m desc 
--3,查看是哪个记得比较多 count(1) 越大,说明占得比较多 
select userid, userhost, count(1) from sys.aud$  
where ntimestamp# >=CAST(to_date('2014-03-01 00:00:00', 'YYYY-MM-DD hh24:mi:ss') AS TIMESTAMP)  
group by userid, userhost 
having count(1) > 500 
order by count(1) desc 
--4,再继续找哪天比较多 userid userhost 为上一步查询内容 
select to_char(ntimestamp#, 'YYYY-MM-DD') audit_date, count(1)  
from sys.aud$  
where ntimestamp# >=CAST(to_date('2015-03-01 00:00:00', 'YYYY-MM-DD hh24:mi:ss') AS TIMESTAMP)  
and userid = 'userid' and userhost = 'userhost' 
group by to_char(ntimestamp#, 'YYYY-MM-DD')  
order by count(1) desc 
; 
select spare1, count(1) from sys.aud$  
where ntimestamp# between CAST(to_date('2016-03-10 00:00:00', 'YYYY-MM-DD hh24:mi:ss') AS TIMESTAMP)  
and CAST(to_date('2016-12-11 00:00:00', 'YYYY-MM-DD hh24:mi:ss') AS TIMESTAMP) 
and userid = 'userid' and userhost = 'userhost' 
group by spare1 
; 
--spare1 为上一步查询内容 
select action#, count(1) from sys.aud$  
where ntimestamp# between CAST(to_date('2016-03-10 00:00:00', 'YYYY-MM-DD hh24:mi:ss') AS TIMESTAMP)  
and CAST(to_date('2016-12-11 00:00:00', 'YYYY-MM-DD hh24:mi:ss') AS TIMESTAMP) 
and userid = 'userid' and userhost = 'userhost' 
and spare1 = 'Administrator' 
group by action# 
order by count(1) desc 
--5,关闭seeion 
noaudit session; 
--6,清空： 
truncate table sys.aud$; 

总结

免责声明：本站发布的内容（图片、视频和文字）以原创、转载和分享为主，文章观点不代表本网站立场，如果涉及侵权请联系站长邮箱：mmqy2019@163.com进行举报，并提供相关证据，查实之后，将立刻删除涉嫌侵权内容。

猜你喜欢

• PHP如何连接sql server，有哪些方法

  参考php手册，对php连接sql server系列做出个小结。主要有五种方式：

• SQL Server批量插入千条数据怎么做，思路是什么

  这篇文章主要介绍了SQL Server批量插入数据案例详解,本篇文章通过简要的案例,讲解了该项技术的了解与使用,以下就是详细内容,需要的朋友可以参考下

• SQL判断是否存在的方法是什么，怎么优化效率更高

  这篇文章主要介绍了SQL判断是否"存在",还在用 count 操作?很耗时的！本文通过实例代码给大家介绍的非常详细，对大家的学习或工作具有一定的参考借鉴价值，需要的朋友可以参考下

• 如何理解SQL表达式的定义和作用是什么

  SQL表达式是计算值的一个或多个值、运算符和SQL函数的组合。这些SQL表达式类似于公式，它们是用查询语言编写的。 您还可以使用它们查询数据库中的特定数据集。

• SQL Server中如何进行子查询，并实现更新

  这篇文章介绍了在SQL Server中使用子查询更新语句的方法，文中通过示例代码介绍的非常详细。对大家的学习或工作具有一定的参考借鉴价值，需要的朋友可以参考下