The correct answer to this question is 30 days from the date that suspicious transaction was detected. SAR is an abbreviation for Suspicious Activity Report. It is a tool, which the BSA (Bank Secrecy Act) provides. The purpose of the tool is to monitor actives that are suspicious and not normally flagged.
SARS can cover almost anything, as long as they seem to be activities that are out of the ordinary. Even actions by the account holder can fall under SAR if it is seen as an illegal action. It is used alot to identify money laundering and fraud