How long did it take for you to become comfortable with forensics?

Pretty open ended question as there's multiple types of forensics like host, network, web, and stuff with SIEMS, but in general how long did it take, and what resources did you use to get to a point you feel competent. Currently doing live IR forensics at work so things are a bit faster, and I feel like I can see the puzzle pieces, but just can't put them together yet. Not to mention the possible gaps in my comp-sci knowledge …

cybersecurity doing forensics general host live network point puzzle question resources things types web work