废话不多说了，具体代码如下所示：

--SYSTEM表空间不足的报警 
登录之后，查询，发现是sys.aud$占的地方太多。 
SQL> select owner, segment_name, segment_type, sum(bytes)/1024/1024 space_m  
  from dba_segments  
  where tablespace_name = 'SYSTEM'  
group by owner, segment_name, segment_type 
having sum(bytes)/1024/1024 >= 20 
order by space_m desc 
; 
 4  5  6  7  
OWNER  SEGMENT_NAME   SEGMENT_TYPE SPACE_M 
-------- ------------------------------- ------- 
SYS   AUD$       TABLE      4480 
SYS   IDL_UB1$     TABLE       272 
SYS   SOURCE$      TABLE       72 
SYS   IDL_UB2$     TABLE       32 
SYS   C_OBJ#_INTCOL#  CLUSTER      27 
SYS   C_TOID_VERSION#  CLUSTER      24 
6 rows selected. 
SQL> 
查看是哪个记得比较多。 
col userhost format a30 
select userid, userhost, count(1) from sys.aud$  
where ntimestamp# >=CAST(to_date('2014-03-01 00:00:00', 'YYYY-MM-DD hh24:mi:ss') AS TIMESTAMP)  
group by userid, userhost 
having count(1) > 500 
order by count(1) desc 
; 
再继续找哪天比较多。 
select to_char(ntimestamp#, 'YYYY-MM-DD') audit_date, count(1)  
from sys.aud$  
where ntimestamp# >=CAST(to_date('2014-03-01 00:00:00', 'YYYY-MM-DD hh24:mi:ss') AS TIMESTAMP)  
and userid = 'xxxx' and userhost = 'xxxx' 
group by to_char(ntimestamp#, 'YYYY-MM-DD')  
order by count(1) desc 
; 
select spare1, count(1) from sys.aud$  
where ntimestamp# between CAST(to_date('2014-03-10 00:00:00', 'YYYY-MM-DD hh24:mi:ss') AS TIMESTAMP)  
and CAST(to_date('2014-03-11 00:00:00', 'YYYY-MM-DD hh24:mi:ss') AS TIMESTAMP) 
and userid = 'xxxx' and userhost = 'xxxx' 
group by spare1 
; 
select action#, count(1) from sys.aud$  
where ntimestamp# between CAST(to_date('2014-03-10 00:00:00', 'YYYY-MM-DD hh24:mi:ss') AS TIMESTAMP)  
and CAST(to_date('2014-03-11 00:00:00', 'YYYY-MM-DD hh24:mi:ss') AS TIMESTAMP) 
and userid = 'xxxx' and userhost = 'xxxx' 
and spare1 = 'xxxx' 
group by action# 
order by count(1) desc 
; 
结果如下： 
  ACTION#  COUNT(1) 
---------- ---------- 
    101   124043 
    100   124043 
SQL> 
其实是上次打开的audit一直没有关闭。 
关闭： 
SQL> noaudit session; 
清空： 
truncate table sys.aud$; 
------------------------------------------------------------------------ 
实战 
------------------------------------------------------------------------ 
--1,查询表空间占用情况 
select dbf.tablespace_name as tablespace_name, 
     dbf.totalspace as totalspace, 
     dbf.totalblocks as totalblocks, 
     dfs.freespace freespace, 
     dfs.freeblocks freeblocks, 
     (dfs.freespace / dbf.totalspace) * 100 as freeRate  
     from (select t.tablespace_name, 
     sum(t.bytes) / 1024 / 1024 totalspace, 
     sum(t.blocks) totalblocks 
     from DBA_DATA_FILES t 
     group by t.tablespace_name) dbf, 
     (select tt.tablespace_name, 
     sum(tt.bytes) / 1024 / 1024 freespace, 
     sum(tt.blocks) freeblocks 
     from DBA_FREE_SPACE tt 
     group by tt.tablespace_name) dfs 
     where trim(dbf.tablespace_name) = trim(dfs.tablespace_name) 
--2,查看哪里占的比较多 SYSTEM 为step1中查询 tablespace_name 内容 
select owner, segment_name, segment_type, sum(bytes)/1024/1024 space_m  
  from dba_segments  
  where tablespace_name = 'SYSTEM'  
group by owner, segment_name, segment_type 
having sum(bytes)/1024/1024 >= 20 
order by space_m desc 
--3,查看是哪个记得比较多 count(1) 越大,说明占得比较多 
select userid, userhost, count(1) from sys.aud$  
where ntimestamp# >=CAST(to_date('2014-03-01 00:00:00', 'YYYY-MM-DD hh24:mi:ss') AS TIMESTAMP)  
group by userid, userhost 
having count(1) > 500 
order by count(1) desc 
--4,再继续找哪天比较多 userid userhost 为上一步查询内容 
select to_char(ntimestamp#, 'YYYY-MM-DD') audit_date, count(1)  
from sys.aud$  
where ntimestamp# >=CAST(to_date('2015-03-01 00:00:00', 'YYYY-MM-DD hh24:mi:ss') AS TIMESTAMP)  
and userid = 'userid' and userhost = 'userhost' 
group by to_char(ntimestamp#, 'YYYY-MM-DD')  
order by count(1) desc 
; 
select spare1, count(1) from sys.aud$  
where ntimestamp# between CAST(to_date('2016-03-10 00:00:00', 'YYYY-MM-DD hh24:mi:ss') AS TIMESTAMP)  
and CAST(to_date('2016-12-11 00:00:00', 'YYYY-MM-DD hh24:mi:ss') AS TIMESTAMP) 
and userid = 'userid' and userhost = 'userhost' 
group by spare1 
; 
--spare1 为上一步查询内容 
select action#, count(1) from sys.aud$  
where ntimestamp# between CAST(to_date('2016-03-10 00:00:00', 'YYYY-MM-DD hh24:mi:ss') AS TIMESTAMP)  
and CAST(to_date('2016-12-11 00:00:00', 'YYYY-MM-DD hh24:mi:ss') AS TIMESTAMP) 
and userid = 'userid' and userhost = 'userhost' 
and spare1 = 'Administrator' 
group by action# 
order by count(1) desc 
--5,关闭seeion 
noaudit session; 
--6,清空： 
truncate table sys.aud$; 

总结

免责声明：本站发布的内容（图片、视频和文字）以原创、转载和分享为主，文章观点不代表本网站立场，如果涉及侵权请联系站长邮箱：mmqy2019@163.com进行举报，并提供相关证据，查实之后，将立刻删除涉嫌侵权内容。

猜你喜欢

• SQL Server自定义函数的作用意义是什么，如何使用

  这篇文章主要介绍了SQL Function 自定义函数详解,需要的朋友可以参考下

• SQL Server数据库导入导出SQL语句怎样写

  MSSQLServer数据库SQL语句导入导出大全，包括与其他数据库和文件的数据的导入导出。有不少朋友对此感兴趣，下面小编给大家整理和分享了相关知识和资料，易于大家学习和理解，有需要的朋友可以借鉴参考，下面我们一起来了解一下吧。

• SQL语句的模块包括什么，怎么理解

  使用sparkSQL是为了解决一般用sql不能解决的复杂逻辑，使用编程语言的优势来解决问题，今天通过本文给大家分享Spark SQL的整体实现逻辑，需要的朋友参考下吧

• SQLServer数据库的主键和唯一约束存有何差别

  这篇文章主要介绍了SQLServer主键和唯一约束的区别,需要的朋友可以参考下

• SQL怎么实现分组查询，SQL语句是什么

  在数据库查询中需要分组用到的命令短语是“GROUP BY”，“GROUP BY”短语用于对查询结果进行分组，可以利用它进行分组汇总，而“HAVING”短语不能脱离“GROUP BY”短语而独立存在。