<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Questions About Automation &amp; Patch Management</title>
	<atom:link href="http://www.brentozar.com/archive/2009/06/questions-about-automation-patch-management/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.brentozar.com/archive/2009/06/questions-about-automation-patch-management/</link>
	<description>Your technology pain-relief experts.</description>
	<lastBuildDate>Wed, 08 Feb 2012 16:37:59 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
	<item>
		<title>By: Brent Ozar</title>
		<link>http://www.brentozar.com/archive/2009/06/questions-about-automation-patch-management/comment-page-1/#comment-9202</link>
		<dc:creator>Brent Ozar</dc:creator>
		<pubDate>Mon, 22 Jun 2009 02:12:33 +0000</pubDate>
		<guid isPermaLink="false">http://www.brentozar.com/?p=4178#comment-9202</guid>
		<description>Alright, time to add my own answers:

&lt;b&gt;Question 1: How do you feel about Run Book Automation for databases?&lt;/b&gt;

In theory, I love Run Book Automation.  In practice, the time it takes to implement a successful solution like this (with today&#039;s real-world tools) outweighs the time savings of automation.  One of the things I love about database administration is it&#039;s never the same day twice - and that makes for tough automation.

I&#039;ve had this discussion with a few people around PowerShell.  There&#039;s a growing community of PowerShell scripts, and some people think we should be able to automate ourselves out of a job.  However, when I look at the staggeringly large community of T-SQL scripts, and I look at how we&#039;re all still working, that doesn&#039;t add up for me.  Just because the scripts and tools are out there doesn&#039;t mean our jobs are over.  It takes time to save time, and sometimes it takes even more time than you save.  The ROI isn&#039;t there for me in Run Book Automation until you get to the enterprise where you&#039;ve got thousands of SQL Server instances.  Even there, you&#039;ll need full-time staff to manage the automation solution, and you&#039;d better be *really* certain it&#039;s going to work before you automagically change a SQL Server&#039;s configuration.  

Like Paul Randal says, the answer is always It Depends, and it&#039;s hard to code all those rules into a tool.  Heck, we&#039;ve got simple backup and recovery tools that aren&#039;t even able to handle every permutation of error messages and configuration problems.  Doing Run Book Automation scares the pants off me.  (Literally. I&#039;m in bed with no pants on.  It&#039;s 10pm on a Sunday, though, cut me some slack.)

&lt;b&gt;Question 2: Do you have multiple copies of the same database?&lt;/b&gt;

As Joel suspected, my answer is yes, heh.  My needs, though, only revolved around homegrown applications.  We had several in-house-built apps that we needed to sync between production, QA/test, and development environments.  We did not do this syncing (either data or schema) with third party applications - we left that up to the third party apps to manage.  Whenever we touched a third party app&#039;s database, we voided the warranty, as they say.

&lt;b&gt;Question 3: If yes, how do you feel about automated patch and configuration management of databases?&lt;/b&gt;

In our homegrown apps, we had two separate problems: we needed to migrate data from prod to QA to dev, and we needed to migrate schemas from dev to QA to prod.  Whenever we did either of these, it was managed in combination with the developers.  We never migrated data or schemas in a vacuum: we did it hand in hand with code changes by the development team.

Even when we had a gold standard schema, we couldn&#039;t handle variations in an automated fashion.  If a schema strayed from the gold standard, it&#039;s because somebody changed it - whether it was an added index, an added field, additional child tables, whatever.  These changes are made by humans, and we wanted a human to get involved to decide what to do next.  We never wanted to lose someone&#039;s schema changes, and we never, ever, ever wanted to lose someone&#039;s data.

I love automated patch and config management for Windows servers because developers don&#039;t put time and effort into Windows configuration settings.  People just accidentally (or purposely) break configurations, and we want to get them back to a known standard ASAP to prevent hack attacks.  Databases aren&#039;t as easy to change, so when changes are made, we need to be more careful about automagically undoing them.</description>
		<content:encoded><![CDATA[<p>Alright, time to add my own answers:</p>
<p><b>Question 1: How do you feel about Run Book Automation for databases?</b></p>
<p>In theory, I love Run Book Automation.  In practice, the time it takes to implement a successful solution like this (with today&#8217;s real-world tools) outweighs the time savings of automation.  One of the things I love about database administration is it&#8217;s never the same day twice &#8211; and that makes for tough automation.</p>
<p>I&#8217;ve had this discussion with a few people around PowerShell.  There&#8217;s a growing community of PowerShell scripts, and some people think we should be able to automate ourselves out of a job.  However, when I look at the staggeringly large community of T-SQL scripts, and I look at how we&#8217;re all still working, that doesn&#8217;t add up for me.  Just because the scripts and tools are out there doesn&#8217;t mean our jobs are over.  It takes time to save time, and sometimes it takes even more time than you save.  The ROI isn&#8217;t there for me in Run Book Automation until you get to the enterprise where you&#8217;ve got thousands of SQL Server instances.  Even there, you&#8217;ll need full-time staff to manage the automation solution, and you&#8217;d better be *really* certain it&#8217;s going to work before you automagically change a SQL Server&#8217;s configuration.  </p>
<p>Like Paul Randal says, the answer is always It Depends, and it&#8217;s hard to code all those rules into a tool.  Heck, we&#8217;ve got simple backup and recovery tools that aren&#8217;t even able to handle every permutation of error messages and configuration problems.  Doing Run Book Automation scares the pants off me.  (Literally. I&#8217;m in bed with no pants on.  It&#8217;s 10pm on a Sunday, though, cut me some slack.)</p>
<p><b>Question 2: Do you have multiple copies of the same database?</b></p>
<p>As Joel suspected, my answer is yes, heh.  My needs, though, only revolved around homegrown applications.  We had several in-house-built apps that we needed to sync between production, QA/test, and development environments.  We did not do this syncing (either data or schema) with third party applications &#8211; we left that up to the third party apps to manage.  Whenever we touched a third party app&#8217;s database, we voided the warranty, as they say.</p>
<p><b>Question 3: If yes, how do you feel about automated patch and configuration management of databases?</b></p>
<p>In our homegrown apps, we had two separate problems: we needed to migrate data from prod to QA to dev, and we needed to migrate schemas from dev to QA to prod.  Whenever we did either of these, it was managed in combination with the developers.  We never migrated data or schemas in a vacuum: we did it hand in hand with code changes by the development team.</p>
<p>Even when we had a gold standard schema, we couldn&#8217;t handle variations in an automated fashion.  If a schema strayed from the gold standard, it&#8217;s because somebody changed it &#8211; whether it was an added index, an added field, additional child tables, whatever.  These changes are made by humans, and we wanted a human to get involved to decide what to do next.  We never wanted to lose someone&#8217;s schema changes, and we never, ever, ever wanted to lose someone&#8217;s data.</p>
<p>I love automated patch and config management for Windows servers because developers don&#8217;t put time and effort into Windows configuration settings.  People just accidentally (or purposely) break configurations, and we want to get them back to a known standard ASAP to prevent hack attacks.  Databases aren&#8217;t as easy to change, so when changes are made, we need to be more careful about automagically undoing them.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: sj</title>
		<link>http://www.brentozar.com/archive/2009/06/questions-about-automation-patch-management/comment-page-1/#comment-9197</link>
		<dc:creator>sj</dc:creator>
		<pubDate>Sun, 21 Jun 2009 03:51:59 +0000</pubDate>
		<guid isPermaLink="false">http://www.brentozar.com/?p=4178#comment-9197</guid>
		<description>Brent,
Not sure if what we do is called Run Book Automation but am guessing it is close.  We can take a SQL Server from crate/rack to live in under 3 hours.  Configured for the domain, surface area configs, SAN, standard sql jobs (backups, cycling logs, index mgmt,...). It is working for standard SQL installs but need to get one setup for our Analysis Svcs setups.  It&#039;s nice but took some time to setup but well worth it.  For example, I was able to crank out 12 new servers this morning during our maintenance window.  

Yes, we have multiple copies of the same image/core db.  In one environment, due to security and confidentialiy of client HR types of data, we have to do this so that client data isn&#039;t comingled.  So each project is it&#039;s own data and we start with a common schema and default data but from there it can customized by the implementation teams.  

The change management is a bugger with this one.  So when we release updates or bug fixes, it is a major headache because we may have as many as 400 databases to test and update.    What I would love to see is some sort of VSS within the DBMS itself.  We have tried VSS whereby the developers script the objects but it just doesn&#039;t work when you have a large number developing db objects.  

We have one DB that is just for the developers to code against and test with but we have an image database that is read only and the Sr DBA can apply scripts/changes to it after all the kinks have been worked out.  That in essence is our gold standard (or build version as we call it).  

As for change management, I prefer automated not automatic.  It&#039;s that whole trust but verify thing.</description>
		<content:encoded><![CDATA[<p>Brent,<br />
Not sure if what we do is called Run Book Automation but am guessing it is close.  We can take a SQL Server from crate/rack to live in under 3 hours.  Configured for the domain, surface area configs, SAN, standard sql jobs (backups, cycling logs, index mgmt,&#8230;). It is working for standard SQL installs but need to get one setup for our Analysis Svcs setups.  It&#8217;s nice but took some time to setup but well worth it.  For example, I was able to crank out 12 new servers this morning during our maintenance window.  </p>
<p>Yes, we have multiple copies of the same image/core db.  In one environment, due to security and confidentialiy of client HR types of data, we have to do this so that client data isn&#8217;t comingled.  So each project is it&#8217;s own data and we start with a common schema and default data but from there it can customized by the implementation teams.  </p>
<p>The change management is a bugger with this one.  So when we release updates or bug fixes, it is a major headache because we may have as many as 400 databases to test and update.    What I would love to see is some sort of VSS within the DBMS itself.  We have tried VSS whereby the developers script the objects but it just doesn&#8217;t work when you have a large number developing db objects.  </p>
<p>We have one DB that is just for the developers to code against and test with but we have an image database that is read only and the Sr DBA can apply scripts/changes to it after all the kinks have been worked out.  That in essence is our gold standard (or build version as we call it).  </p>
<p>As for change management, I prefer automated not automatic.  It&#8217;s that whole trust but verify thing.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Brent Ozar</title>
		<link>http://www.brentozar.com/archive/2009/06/questions-about-automation-patch-management/comment-page-1/#comment-9178</link>
		<dc:creator>Brent Ozar</dc:creator>
		<pubDate>Wed, 17 Jun 2009 15:51:08 +0000</pubDate>
		<guid isPermaLink="false">http://www.brentozar.com/?p=4178#comment-9178</guid>
		<description>Damn, Joel! You&#039;re good!</description>
		<content:encoded><![CDATA[<p>Damn, Joel! You&#8217;re good!</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Joel Coehoorn</title>
		<link>http://www.brentozar.com/archive/2009/06/questions-about-automation-patch-management/comment-page-1/#comment-9177</link>
		<dc:creator>Joel Coehoorn</dc:creator>
		<pubDate>Wed, 17 Jun 2009 14:49:40 +0000</pubDate>
		<guid isPermaLink="false">http://www.brentozar.com/?p=4178#comment-9177</guid>
		<description>&gt; &quot;I’ll hold back my own answers for a couple of days.&quot;

But stating that, you just answered one of the questions ;)  You admit you have answers to all three, and that implies that your answer to #2 is &quot;Yes.&quot;  Of course, I&#039;m sure you&#039;ll put a lot more detail behind it later, but I kind of thought that was funny.</description>
		<content:encoded><![CDATA[<p>&gt; &#8220;I’ll hold back my own answers for a couple of days.&#8221;</p>
<p>But stating that, you just answered one of the questions <img src='http://www.brentozar.com/wp-includes/images/smilies/icon_wink.gif' alt=';)' class='wp-smiley' />   You admit you have answers to all three, and that implies that your answer to #2 is &#8220;Yes.&#8221;  Of course, I&#8217;m sure you&#8217;ll put a lot more detail behind it later, but I kind of thought that was funny.</p>
]]></content:encoded>
	</item>
</channel>
</rss>

<!-- Performance optimized by W3 Total Cache. Learn more: http://www.w3-edge.com/wordpress-plugins/

Page Caching using disk: enhanced
Object Caching 540/546 objects using disk: basic

Served from: www.brentozar.com @ 2012-02-09 06:29:54 -->
