by_user should take a Boolean and not a String.

by_user is used to tell the API that you want to see report for
commands submitted only by the current user. By default, the
API returns commands submitted by all users of the current
account.