I could see piping all syslog critial and above out to a .matrix printer that sits in a locked room as a cheap way to enforce a WORM log of events. With a continious sheet of paper you would only need to access it rarely, and essentially only to change the ribbon and replace the paper source.