There is sometimes a need to find the corresponding Statlib log file and the process that logged an event in the event viewer.  This article details how we can find the corresponding process (assuming that it is before it gets recycled) and the corresponding Statlib log file.

Relevant References:
https://support.tibco.com/s/article/Event-logs-relevant-for-troubleshooting-in-Statistica
https://support.tibco.com/s/article/How-to-enable-Statistica-Library-logging
https://support.tibco.com/s/article/How-to-create-a-dump-file-for-Statcf-process

There is sometimes a need to find the corresponding Statlib log file and the process that logged an event in the event viewer. This article details how we can find the corresponding process (assuming that it is before it gets recycled) and the corresponding Statlib log file.

For the purpose of troubleshooting a scheduled job failure, it may be necessary to find a Statlib log file/Process dump that corresponds to a specific event logged in Event Viewer. For the purpose of illustration, lets assume that the below event is of interest




Make a note of the Process ID by looking at the Event's General tab and looking for Process listed. In this case, it is a process with the Process ID- 21340 . To look for the Statlib log that would have details of this event, browse to : C:\Windows\System32\LogFiles\WebSTATISTICA and sort by "Date Modified" descending (if this is a recent process or to easily identify with Date the Event was logged) . Look for the Statlib file with the Process ID in its name.  the Statlib files will genrally have the format - Statlib (Time Stamp) [P<pid>-T<tid>].log where <pid> refers to the process id. The <tid> usually corresponds to thread id.

NOTE : For the Statlib log to even be there in this folder, Statistica library logging needs to be enabled as detailed in the referenced article

To find the corresponding Process in Task Manager or in a debugging tool such as Process Explorer, first ensure that Process ID (PID) is a displayed column. Find the process named "statcf.exe" and has a PID that corresponds to the one noted in the event log:




 

https://support.tibco.com/s/article/How-to-create-a-dump-file-for-Statcf-process
https://support.tibco.com/s/article/Event-logs-relevant-for-troubleshooting-in-Statistica
https://support.tibco.com/s/article/How-to-enable-Statistica-Library-logging

https://docs.microsoft.com/en-us/windows-hardware/drivers/debugger/finding-the-process-id