#microsoftsqlserver
Cómo solucionar un alto consumo de CPU en SQL Server

lnkd.in/p/epyPRUnz
#sqlserver #dba #databaseadministration #performancetuning #querystore #sqlperformance #basesdedatos #microsoftsqlserver #optimización #tecnología | Edgar Márquez
Cómo solucionar un alto consumo de CPU en SQL Server Un consumo elevado de CPU en SQL Server no significa necesariamente que el servidor necesite más procesadores. Antes de ampliar la infraestructura, es fundamental identificar qué está utilizando la CPU y por qué. El diagnóstico debe comenzar diferenciando entre una carga de trabajo legítima y un comportamiento anómalo. Consultas con planes de ejecución ineficientes, recompilaciones frecuentes, estadísticas desactualizadas, paralelismo excesivo, funciones costosas o cambios en el volumen de datos pueden provocar que una carga habitual se convierta en un problema de rendimiento. Una de las primeras herramientas que debería utilizar un DBA es Query Store, complementada con DMVs y los planes de ejecución. Estas herramientas permiten identificar las consultas que consumen más CPU, comparar su comportamiento histórico y determinar si el problema está relacionado con una sentencia concreta o con la carga general del sistema. La solución tampoco debería ser simplemente aumentar el hardware. Optimizar una consulta, revisar índices, actualizar estadísticas, corregir un plan de ejecución o ajustar determinadas configuraciones puede generar mejoras mucho mayores y sostenibles. También es importante analizar cuándo ocurre el problema. Un pico de CPU durante un proceso programado puede tener una causa completamente diferente a un consumo elevado que se mantiene durante toda la jornada. Resolver problemas de CPU requiere medir antes de actuar. La experiencia del DBA resulta especialmente valiosa cuando combina métricas, planes de ejecución y conocimiento del comportamiento de la aplicación. La CPU es solamente el síntoma. Encontrar la causa es el verdadero trabajo del DBA. #SQLServer #DBA #DatabaseAdministration #PerformanceTuning #QueryStore #SQLPerformance #BasesDeDatos #MicrosoftSQLServer #Optimización #Tecnología Referencia bibliográfica interna Código: 2026081101 Área: Bases de Datos | SQL Server | Rendimiento y Optimización
lnkd.in
August 11, 2026 at 10:50 AM
T-SQL en SQL Server 2025: REGEXP_LIKE llega para simplificar las búsquedas por patrones

lnkd.in/p/d5WjX_qD
#sqlserver #sqlserver2025 #tsql #regexplike #dba #basesdedatos #sql #databaseadministration #microsoftsqlserver #tecnología | Edgar Márquez
T-SQL en SQL Server 2025: REGEXP_LIKE llega para simplificar las búsquedas por patrones Durante años, trabajar con patrones complejos en SQL Server ha requerido combinar LIKE, comodines, funciones de...
lnkd.in
August 9, 2026 at 3:10 PM
Recently updated blog post:
Documenting my SQL Server Management Studio configuration.
vladdba.com/2025/11/16/m...
#sqlserver #sqldba #microsoftsqlserver #mssqlserver #mssql #mssqldba #sql #mvpbuzz
My SQL Server Management Studio 22 configuration
SQL Server Management Studio 22 just went GA this week, so I figured I'd document my new configuration in a blog post.
vladdba.com
August 6, 2026 at 4:31 PM
New blog post:
In which I cover the process of spinning up an Azure SQL Database container using #QNAP Container Station.
vladdba.com/2026/08/02/a...
#sqlserver #sqldba #microsoftsqlserver #mssqlserver #mssql #mssqldba #sql #mvpbuzz
Setting up an Azure SQL DB container in QNAP Container Station
In this post I cover the process of setting up, connecting to and interacting with an Azure SQL DB container in QNAP's Container Station.
vladdba.com
August 4, 2026 at 3:30 PM
New blog post:
In which I cover the process of spinning up an Azure SQL Database container in Podman.
vladdba.com/2026/08/02/a...
#sqlserver #sqldba #microsoftsqlserver #mssqlserver #mssql #mssqldba #sql #mvpbuzz
Setting up an Azure SQL DB container in Podman
In this post I cover the process of setting up, connecting to and interacting with an Azure SQL DB container in Podman.
vladdba.com
August 3, 2026 at 7:03 PM
Think sophisticated threats are the only danger? The VertexAI Labs breach shows how a basic SQL injection escalated to a full system takeover and cryptojacking. This detailed breakdown reveals why fundamental security…

https://www.tpp.blog/1puihlk

#cybersecurity #vertexailabs #microsoftsqlserver
July 30, 2026 at 5:16 PM
New blog post:
Querying Shodan's REST API directly from SQL Server using SQL Server 2025's sp_invoke_external_rest_endpoint stored procedure.
vladdba.com/2026/07/19/s...
#sqlserver #sqldba #microsoftsqlserver #mssqlserver #mssql #mssqldba #sql #mvpbuzz #cybersecurity #security #infosec
Querying Shodan with SQL Server's sp_invoke_external_rest_endpoint
In this post I'm querying Shodan's REST API directly from SQL Server using SQL Server 2025's sp_invoke_external_rest_endpoint.
vladdba.com
July 21, 2026 at 12:25 PM
How many SQL Server instances are exposed to the public internet? I pulled real data from Shodan to find out.
Breakdown by version, geography, and organizations.
vladdba.com/2026/07/19/i...
#sqlserver #sqldba #microsoftsqlserver #mssql #mssqldba #sql #mvpbuzz #cybersecurity #security #infosec
Internet-exposed SQL Server instances and where to find them
In this post I dig through some data that Shodan.io provides for internet-exposed SQL Server instances, their versions and locations.
vladdba.com
July 20, 2026 at 11:48 AM
New blog post:
My third contribution to T-SQL Tuesday, about things that make me instantly think a query is bad.
vladdba.com/2026/07/07/t...
#sqlserver #sqldba #microsoftsqlserver #mssqlserver #mssql #mssqldba #sql #tsql2sday #azure #azuresql #mvpbuzz
T-SQL Tuesday #200 – things that make me instantly think a query is bad
This month's T-SQL Tuesday invitation comes from Brent Ozar, and it's titled "When I’m looking at a query, I bet it’s bad if I see __.".
vladdba.com
July 7, 2026 at 2:55 PM
New blog post:
On my experience as a first time speaker at a Data Saturday conference at Data Saturday Croatia 2026.
vladdba.com/2026/06/23/a...
#sqlserver #sqldba #microsoftsqlserver #mssqlserver #mssql #mssqldba #sql #mvpbuzz
From Attendee to Speaker: My first Data Saturday session
In this post I cover my experience as a first time speaker at a Data Saturday conference at Data Saturday Croatia 2026.
vladdba.com
June 23, 2026 at 1:55 PM
New blog post:
In which I cover and demo SQL Server roles and permissions that are viable avenues for privilege escalation to sysadmin.
vladdba.com/2026/05/22/s...
#sqlserver #sqldba #microsoftsqlserver #hashcat #cybersecurity #infosec #sql #mvpbuzz
SQL Server permissions that can lead to privilege escalation
In this post I cover SQL Server roles and permissions that can act as viable avenues for privilege escalation to sysadmin.
vladdba.com
May 25, 2026 at 2:42 PM
Blog post from the past:
In which I go over potential reasons for why some special characters end up corrupted and displayed as question marks, squares or something completely different in SQL Server.
vladdba.com/2024/10/04/c...
#sqlserver #sqldba #microsoftsqlserver #mssqlserver #mssql #mssqldba
Characters displayed as question marks or squares in SQL Server
In this post I'm going over potential reasons why some characters end up displayed as question marks or squares in SQL Server.
vladdba.com
May 6, 2026 at 4:26 PM
New blog post:
My guideline on how to handle and test SQL Server backups to ensure their viability and avoid a "Schrödinger's backup" scenario.
#sqlserver #sqldba #microsoftsqlserver #mssqlserver #mssql #mssqldba #sql #azure
Test SQL Server backups to avoid Schrödinger's backups
This post is my guideline on how to handle and test SQL Server backups to ensure their viability and avoid a "Schrödinger's backup" scenario.
vladdba.com
April 23, 2026 at 2:06 PM
New blog post:
In which I go over three points that are vital in preventing SQL injection when working with dynamic T-SQL.
vladdba.com/2026/04/15/d...
#sqlserver #sqldba #microsoftsqlserver #mssqlserver #mssql #mssqldba #sql
Using dynamic T-SQL? Parametrization alone can't prevent SQL injection
In this post I'll go over three points that are vital in preventing SQL injection when working with dynamic T-SQL.
vladdba.com
April 15, 2026 at 2:36 PM
New blog post:
My second contribution to T-SQL Tuesday, about a session that got me interested into the security side of things.
vladdba.com/2026/04/14/t...
#sqlserver #sqldba #microsoftsqlserver #mssqlserver #mssql #mssqldba #sql #tsql2sday
T-SQL Tuesday #197 - An impactful session changed my DBA career
My second time participating in T-SQL Tuesday, Steve Hughes‘s invitation about an impactful session from a conference brought back memories.
vladdba.com
April 14, 2026 at 9:06 AM
New blog post:
In which I provide some examples as to why FLOAT isn’t the best option for storing exact financial data in SQL Server.
vladdba.com/2026/04/11/s...
#sqlserver #sqldba #microsoftsqlserver #mssqlserver #mssql #mssqldba #sql
PSA: Stop using FLOAT to store financial data in SQL Server
In this post I provide some examples as to why FLOAT isn't the best option for storing exact financial data in SQL Server.
vladdba.com
April 13, 2026 at 9:01 AM
Blog post from the past:
In which I demo two PoCs for SQL injection vulnerabilities fixed in SQL Server 2022 CU20 GDR KB5063814
vladdba.com/2025/08/29/p...
#sqlserver #sqldba #microsoftsqlserver #mssqlserver #mssql #mssqldba #sql
PoCs for two SQL Injection vulnerabilities fixed in SQL Server 2022 GDR KB5063814
In this post I demo two PoCs for SQL injection vulnerabilities fixed in SQL Server 2022 CU20 GDR KB5063814
vladdba.com
April 9, 2026 at 4:20 PM
Latest release of PSBlitz:
- New GUI mode
- Google Cloud SQL & SQL Server 2025 compatibility
- Overhauled HTML reports - Dark theme, better accessibility, improved UX
- New Query Store pages in HTML/Excel reports
- Updated resources
#sqlserver #sqldba #powershell #microsoftsqlserver #dba #PSBlitz
PSBlitz v6.0.0: GUI Mode, HTML Overhaul, and Google Cloud SQL Support
The latest release of PSBlitz (6.0.0) is finally out and it brings GUI Mode, Dark Mode, Google Cloud SQL Support, and updated resources.
vladdba.com
March 23, 2026 at 7:38 PM
Misconfigured Microsoft SQL Servers allow attackers to escalate privileges, enable xp_cmdshell, execute OS commands, and upload files using Impacket’s mssqlclient.py during pentests and red team operations. #MSSQLExploitation #RedTeam
Impacket for Pentester: MSSQL Exploitation
This walkthrough demonstrates how common Microsoft SQL Server misconfigurations can be chained to achieve full OS-level compromise during penetration tests and red team engagements. Using Impacket's mssqlclient.py, an attacker can authenticate, enumerate databases and logins, escalate to SA via IMPERSONATE or linked servers, enable xp_cmdshell, execute OS commands, and upload files — defenders must harden MSSQL instances to prevent these vectors. #MicrosoftSQLServer #mssqlclient
www.hendryadrian.com
March 21, 2026 at 4:00 AM
New blog post:
In which I cover where to find the 4 new export formats in SSMS 22.4.1 and one gotcha you need to be mindful of.
vladdba.com/2026/03/20/s...
#sqlserver #sqldba #microsoftsqlserver #mssqlserver #mssql #mssqldba #sql
SSMS 22.4.1 exports results to Excel, JSON, Markdown, and XML
The latest update to SQL Server Management Studio (SSMS) 22 adds 4 new results export formats: Excel, JSON, Markdown, and XML.
vladdba.com
March 20, 2026 at 12:11 PM
March 17, 2026 at 10:09 AM
Blog post from the past:
In which I explore the impact of SQL Server 2025’s #PBKDF2 hashing algorithm on password cracking and compare it with SQL Server 2022
vladdba.com/2025/06/23/l...
#sqlserver #sqldba #microsoftsqlserver #mssqlserver #mssql #mssqldba
Looking into SQL Server 2025's new PBKDF2 hashing algorithm
In this post I explore the impact of SQL Server 2025's PBKDF2 hashing algorithm on password cracking and compare it with SQL Server 2022.
vladdba.com
March 11, 2026 at 5:14 PM