diff --git a/CN发布版本更新记录/2024/CN-24.01.rc1/CN/groot/etl_session_record_processed_kafka_to_cn_kafka b/CN发布版本更新记录/2024/CN-24.01.rc1/CN/groot/etl_session_record_processed_kafka_to_cn_kafka
index d90bc3b..ccee25c 100644
--- a/CN发布版本更新记录/2024/CN-24.01.rc1/CN/groot/etl_session_record_processed_kafka_to_cn_kafka
+++ b/CN发布版本更新记录/2024/CN-24.01.rc1/CN/groot/etl_session_record_processed_kafka_to_cn_kafka
@@ -174,6 +174,26 @@ processing_pipelines:
           kb_name: none
           #kb_name: cn_internal_ip
 
+      - function: EVAL
+        output_fields: [ sent_bytes ]
+        parameters:
+          value_expression: "sent_bytes == null ? 0 : sent_bytes"
+
+      - function: EVAL
+        output_fields: [ sent_pkts ]
+        parameters:
+          value_expression: "sent_pkts == null ? 0 : sent_pkts"
+
+      - function: EVAL
+        output_fields: [ received_bytes ]
+        parameters:
+          value_expression: "received_bytes == null ? 0 : received_bytes"
+
+      - function: EVAL
+        output_fields: [ received_pkts ]
+        parameters:
+          value_expression: "received_pkts == null ? 0 : received_pkts"
+
       - function: EVAL
         output_fields: [ traffic_inbound_byte ]
         parameters:
diff --git a/Groot-Stream 最新全量配置模版/CN/etl_session_record_processed_kafka_to_cn_kafka b/Groot-Stream 最新全量配置模版/CN/etl_session_record_processed_kafka_to_cn_kafka
index d90bc3b..ccee25c 100644
--- a/Groot-Stream 最新全量配置模版/CN/etl_session_record_processed_kafka_to_cn_kafka	
+++ b/Groot-Stream 最新全量配置模版/CN/etl_session_record_processed_kafka_to_cn_kafka	
@@ -174,6 +174,26 @@ processing_pipelines:
           kb_name: none
           #kb_name: cn_internal_ip
 
+      - function: EVAL
+        output_fields: [ sent_bytes ]
+        parameters:
+          value_expression: "sent_bytes == null ? 0 : sent_bytes"
+
+      - function: EVAL
+        output_fields: [ sent_pkts ]
+        parameters:
+          value_expression: "sent_pkts == null ? 0 : sent_pkts"
+
+      - function: EVAL
+        output_fields: [ received_bytes ]
+        parameters:
+          value_expression: "received_bytes == null ? 0 : received_bytes"
+
+      - function: EVAL
+        output_fields: [ received_pkts ]
+        parameters:
+          value_expression: "received_pkts == null ? 0 : received_pkts"
+
       - function: EVAL
         output_fields: [ traffic_inbound_byte ]
         parameters: